CVE-2025-53743

The Jenkins Applitools Eyes Plugin (version 1.16.5 and earlier ) contains an Insufficiently Protected Credentials vulnerability. The plugin fails to mask Applitools API keys on the job configuration form, potentially allowing attackers to observe and capture sensitive credentials. Additionally, k...

CVE-2025-31724

Jenkins Cadence vManager Plugin 4.0.0-282.v5096ac2db275 and earlier stores Verisium Manager vAPI keys unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Extended Read permission, or access to the Jenkins controller file system...