35 matches found
PYSEC-2026-367 Kedro deserialization vulnerability
A Remote Code Execution RCE vulnerability has been identified in the Kedro ShelveStore class version 0.19.8. This vulnerability allows an attacker to execute arbitrary Python code via deserialization of malicious payloads, potentially leading to a full system compromise. The ShelveStore class use...
PT-2026-53455
A Remote Code Execution RCE vulnerability has been identified in the Kedro ShelveStore class version 0.19.8. This vulnerability allows an attacker to execute arbitrary Python code via deserialization of malicious payloads, potentially leading to a full system compromise. The ShelveStore class use...
EUVD-2022-2920
Malicious code in bioql PyPI...
EUVD-2022-3358
Malicious code in bioql PyPI...
CVE-2018-1999029
A cross-site scripting vulnerability exists in Jenkins Shelve Project Plugin 1.5 and earlier in ShelveProjectAction/index.jelly, ShelvedProjectsAction/index.jelly that allows attackers with Job/Configure permission to define JavaScript that would be executed in another user's browser when that...
GHSA-747F-WW56-4Q4H Kedro deserialization vulnerability
A Remote Code Execution RCE vulnerability has been identified in the Kedro ShelveStore class version 0.19.8. This vulnerability allows an attacker to execute arbitrary Python code via deserialization of malicious payloads, potentially leading to a full system compromise. The ShelveStore class use...
PT-2025-12291
Name of the Vulnerable Software and Affected Versions Kedro version 0.19.8 Description A Remote Code Execution RCE issue has been identified, allowing an attacker to execute arbitrary Python code via deserialization of malicious payloads, potentially leading to a full system compromise. The...
CSRF vulnerability in Jenkins Shelve Project Plugin
Jenkins Shelve Project Plugin 3.0 and earlier does not require POST requests for HTTP endpoints, resulting in cross-site request forgery CSRF vulnerabilities. These vulnerabilities allow attackers to shelve, unshelve, or delete a project. Jenkins Shelve Project Plugin 3.1 requires POST requests f...
org.jenkins-ci.plugins:cron-shelve (1.3) potentially affected by CVE-2020-2321 via org.jenkins-ci.plugins:shelve-project-plugin (1.5)
org.jenkins-ci.plugins:shelve-project-plugin MAVEN version 1.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:shelve-project-plugin and may be impacted: - org.jenkins-ci.plugins:cron-shelve 1.3 Source cves: CVE-2020-2321 Source...
GHSA-9F37-GGXM-H6WX CSRF vulnerability in Jenkins Shelve Project Plugin
Jenkins Shelve Project Plugin 3.0 and earlier does not require POST requests for HTTP endpoints, resulting in cross-site request forgery CSRF vulnerabilities. These vulnerabilities allow attackers to shelve, unshelve, or delete a project. Jenkins Shelve Project Plugin 3.1 requires POST requests f...
Stored Cross-Site Scripting Vulnerability in Jenkins Shelve Project Plugin
A cross-site scripting vulnerability exists in Jenkins Shelve Project Plugin 1.5 and earlier in ShelveProjectAction/index.jelly, ShelvedProjectsAction/index.jelly that allows attackers with Job/Configure permission to define JavaScript that would be executed in another user's browser when that...
GHSA-7577-F8FP-5977 Stored Cross-Site Scripting Vulnerability in Jenkins Shelve Project Plugin
A cross-site scripting vulnerability exists in Jenkins Shelve Project Plugin 1.5 and earlier in ShelveProjectAction/index.jelly, ShelvedProjectsAction/index.jelly that allows attackers with Job/Configure permission to define JavaScript that would be executed in another user's browser when that...
Cloudbees Jenkins Shelve Project Plugin Cross-Site Request Forgery Vulnerability
Cloudbees Jenkins Hudson Labs is the United States CloudBees Cloudbees company a set of Java-based development of continuous integration tools . The product is mainly used to monitor the continuous software version release/testing project and some timed tasks . A cross-site request forgery...
CVE-2020-2321
A cross-site request forgery CSRF vulnerability in Jenkins Shelve Project Plugin 3.0 and earlier allows attackers to shelve, unshelve, or delete a project...
CVE-2020-2321
A cross-site request forgery CSRF vulnerability in Jenkins Shelve Project Plugin 3.0 and earlier allows attackers to shelve, unshelve, or delete a project...
Cross site request forgery (csrf)
A cross-site request forgery CSRF vulnerability in Jenkins Shelve Project Plugin 3.0 and earlier allows attackers to shelve, unshelve, or delete a project...
CVE-2020-2321
A cross-site request forgery CSRF vulnerability in Jenkins Shelve Project Plugin 3.0 and earlier allows attackers to shelve, unshelve, or delete a project...
CVE-2020-2321
A cross-site request forgery CSRF vulnerability in Jenkins Shelve Project Plugin 3.0 and earlier allows attackers to shelve, unshelve, or delete a project...
CVE-2020-2321
CVE-2020-2321 concerns a CSRF vulnerability in Jenkins Shelve Project Plugin (3.0 and earlier). The underlying issue, reported across multiple sources, is that the plugin’s HTTP endpoints did not require POST requests, enabling attackers to shelve, unshelve, or delete a project without authentica...
