Allocation of Resources Without Limits or Throttling

Overview @fedify/vocab-runtime is a Runtime library for code-generated Activity Vocabulary APIs Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling through the recursive handling of HTTP redirects in the remote and authenticated document loader...

CVE-2026-34148 Fedify affected by resource exhaustion caused by unbounded redirect following during remote key/document resolution

Fedify is a TypeScript library for building federated server apps powered by ActivityPub. Prior to 1.9.6, 1.10.5, 2.0.8, and 2.1.1, @fedify/fedify follows HTTP redirects recursively in its remote document loader and authenticated document loader without enforcing a maximum redirect count or...

Hackers Exploit WordPress Sites to Power Next-Gen ClickFix Phishing Attacks

Cybersecurity researchers are calling attention to a nefarious campaign targeting WordPress sites to make malicious JavaScript injections that are designed to redirect users to sketchy sites. "Site visitors get injected content that was drive-by malware like fake Cloudflare verification," Sucuri...

EUVD-2022-5283

Malicious code in bioql PyPI...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.11), org.jenkins-ci.plugins:workflow-remote-loader (>=1.0, <=1.5) potentially affected by CVE-2022-43405 via org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.11)

org.jenkins-ci.plugins.workflow:workflow-cps-global-lib MAVEN version 1.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps-global-lib and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregato...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.11), org.jenkins-ci.plugins:workflow-remote-loader (>=1.0, <=1.5) potentially affected by CVE-2022-43406 via org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.11)

org.jenkins-ci.plugins.workflow:workflow-cps-global-lib MAVEN version 1.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps-global-lib and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregato...

Unsafe entry in Script Security list of approved signatures in Pipeline Remote Loader Plugin

Jenkins Pipeline Remote Loader Plugin before 1.5 provided a custom whitelist for script security that allowed attackers to invoke arbitrary methods, bypassing typical sandbox protection...

GHSA-V558-FHW2-V46W Unsafe entry in Script Security list of approved signatures in Pipeline Remote Loader Plugin

Jenkins Pipeline Remote Loader Plugin before 1.5 provided a custom whitelist for script security that allowed attackers to invoke arbitrary methods, bypassing typical sandbox protection...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.11), org.jenkins-ci.plugins:workflow-remote-loader (>=1.0, <=1.5) potentially affected by CVE-2019-10357 via org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.11)

org.jenkins-ci.plugins.workflow:workflow-cps-global-lib MAVEN version 1.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps-global-lib and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregato...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.11), org.jenkins-ci.plugins:workflow-remote-loader (>=1.0, <=1.5) potentially affected by CVE-2018-1000015 via org.jenkins-ci.plugins.workflow:workflow-durable-task-step (1.11)

org.jenkins-ci.plugins.workflow:workflow-durable-task-step MAVEN version 1.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-durable-task-step and may be impacted: -...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.11), org.jenkins-ci.plugins:workflow-remote-loader (>=1.0, <=1.5) potentially affected by CVE-2022-29047 via org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.11)

org.jenkins-ci.plugins.workflow:workflow-cps-global-lib MAVEN version 1.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps-global-lib and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregato...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.11), org.jenkins-ci.plugins:workflow-remote-loader (>=1.0, <=1.5) potentially affected by CVE-2022-25174 via org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.11)

org.jenkins-ci.plugins.workflow:workflow-cps-global-lib MAVEN version 1.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps-global-lib and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregato...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.11), org.jenkins-ci.plugins:workflow-remote-loader (>=1.0, <=1.5) potentially affected by CVE-2022-25177 via org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.11)

org.jenkins-ci.plugins.workflow:workflow-cps-global-lib MAVEN version 1.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps-global-lib and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregato...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.11), org.jenkins-ci.plugins:workflow-remote-loader (>=1.0, <=1.5) potentially affected by CVE-2022-25178 via org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.11)

org.jenkins-ci.plugins.workflow:workflow-cps-global-lib MAVEN version 1.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps-global-lib and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregato...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.11), org.jenkins-ci.plugins:workflow-remote-loader (>=1.0, <=1.5) potentially affected by CVE-2022-25181 via org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.11)

org.jenkins-ci.plugins.workflow:workflow-cps-global-lib MAVEN version 1.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps-global-lib and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregato...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.11), org.jenkins-ci.plugins:workflow-remote-loader (>=1.0, <=1.5) potentially affected by CVE-2022-25182 via org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.11)

org.jenkins-ci.plugins.workflow:workflow-cps-global-lib MAVEN version 1.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps-global-lib and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregato...

org.jenkins-ci.plugins.workflow:workflow-aggregator (1.11), org.jenkins-ci.plugins:workflow-remote-loader (>=1.0, <=1.5) potentially affected by CVE-2022-25183 via org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.11)

org.jenkins-ci.plugins.workflow:workflow-cps-global-lib MAVEN version 1.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps-global-lib and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregato...

CVE-2019-10328

A flaw was found in the Jenkins Workflow Remote Loader plugin. An unsafe whitelist entry was made that allowed invoking arbitrary methods and bypassing sandbox protection. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

jenkins-plugin-workflow-remote-loader: Unsafe Script Security whitelist entry in Pipeline Remote Loader Plugin (SECURITY-921)

A flaw was found in the Jenkins Workflow Remote Loader plugin. An unsafe whitelist entry was made that allowed invoking arbitrary methods and bypassing sandbox protection. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

Jenkins Pipeline Remote Loader RCE

The vulnerability of the Jenkins Pipeline Remote Loader plugin is related to deficiencies in data protection mechanisms. Exploiting this vulnerability allows a malicious actor to bypass sandbox restrictions and execute arbitrary methods remotely...