EUVD-2026-1996

hermes's raw options logging may disclose secrets passed in via subcommand options argument...

Jenkins Artifactory Plugin missing permission check

Jenkins Artifactory Plugin does not perform permission checks on a method implementing form validation. This allows users with Overall/Read access to Jenkins to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials...