org.jenkins-ci.main:jenkins-test-harness (1.409.2), org.jenkins-ci.main:jenkins-war (1.409.2) +4 more potentially affected by CVE-2026-53438 via org.jenkins-ci.main:jenkins-core (1.409.2)

org.jenkins-ci.main:jenkins-core MAVEN version 1.409.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.409.2 - org.jenkins-ci.main:jenkins-war 1.409.2 -...

com.tikalk.hudson.plugins:notification (1.10), org.jenkins-ci.main:jenkins-test-harness (1.605) +5 more potentially affected by CVE-2026-53438 via org.jenkins-ci.main:jenkins-core (1.605)

org.jenkins-ci.main:jenkins-core MAVEN version 1.605 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.tikalk.hudson.plugins:notification 1.10 - org.jenkins-ci.main:jenkins-test-harness 1.605 -...

org.jenkins-ci.main:jenkins-test-harness (1.461), org.jenkins-ci.main:jenkins-war (1.461) +8 more potentially affected by CVE-2026-53435 via org.jenkins-ci.main:jenkins-core (1.461)

org.jenkins-ci.main:jenkins-core MAVEN version 1.461 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.461 - org.jenkins-ci.main:jenkins-war 1.461 -...

com.zenika.jenkins-ci.plugins:gradle (1.12), org.jenkins-ci.main:jenkins-test-harness (1.409) +70 more potentially affected by CVE-2026-53435 via org.jenkins-ci.main:jenkins-core (1.409)

org.jenkins-ci.main:jenkins-core MAVEN version 1.409 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.zenika.jenkins-ci.plugins:gradle 1.12 - org.jenkins-ci.main:jenkins-test-harness 1.409 -...

org.jenkins-ci.main:jenkins-test-harness (1.422), org.jenkins-ci.main:jenkins-war (1.422) +3 more potentially affected by CVE-2026-53438 via org.jenkins-ci.main:jenkins-core (1.422)

org.jenkins-ci.main:jenkins-core MAVEN version 1.422 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.422 - org.jenkins-ci.main:jenkins-war 1.422 -...

org.jenkins-ci.main:jenkins-test-harness (1.460), org.jenkins-ci.main:jenkins-war (1.460) +10 more potentially affected by CVE-2026-53435 via org.jenkins-ci.main:jenkins-core (1.460)

org.jenkins-ci.main:jenkins-core MAVEN version 1.460 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.460 - org.jenkins-ci.main:jenkins-war 1.460 -...

org.jenkins-ci.main:jenkins-test-harness (1.406), org.jenkins-ci.main:jenkins-war (1.406) +7 more potentially affected by CVE-2026-53438 via org.jenkins-ci.main:jenkins-core (1.406)

org.jenkins-ci.main:jenkins-core MAVEN version 1.406 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.406 - org.jenkins-ci.main:jenkins-war 1.406 -...

org.jenkins-ci.main:jenkins-test-harness (1.545), org.jenkins-ci.main:jenkins-war (1.545) +2 more potentially affected by CVE-2026-53438 via org.jenkins-ci.main:jenkins-core (1.545)

org.jenkins-ci.main:jenkins-core MAVEN version 1.545 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.545 - org.jenkins-ci.main:jenkins-war 1.545 -...

org.jenkins-ci.main:jenkins-test-harness (1.549), org.jenkins-ci.main:jenkins-war (1.549) +1 more potentially affected by CVE-2026-53439 via org.jenkins-ci.main:jenkins-core (1.549)

org.jenkins-ci.main:jenkins-core MAVEN version 1.549 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.549 - org.jenkins-ci.main:jenkins-war 1.549 -...

hudson.plugins.concurrent_login:concurrent-login-plugin (>=0.5, <=0.7), org.jenkins-ci.main:jenkins-test-harness (1.513) +4 more potentially affected by CVE-2026-53440 via org.jenkins-ci.main:jenkins-core (1.513)

org.jenkins-ci.main:jenkins-core MAVEN version 1.513 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - hudson.plugins.concurrentlogin:concurrent-login-plugin =0.5, =0.7 -...

org.jenkins-ci.main:jenkins-test-harness (1.472), org.jenkins-ci.main:jenkins-war (1.472) +5 more potentially affected by CVE-2026-53437 via org.jenkins-ci.main:jenkins-core (1.472)

org.jenkins-ci.main:jenkins-core MAVEN version 1.472 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.472 - org.jenkins-ci.main:jenkins-war 1.472 -...

br.com.ingenieux.jenkins.plugins:awseb-deployment-plugin (>=0.1.0, <=0.3.5), org.jenkins-ci.main:jenkins-test-harness (1.625.2) +6 more potentially affected by CVE-2026-53436 via org.jenkins-ci.main:jenkins-core (1.625.2)

org.jenkins-ci.main:jenkins-core MAVEN version 1.625.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - br.com.ingenieux.jenkins.plugins:awseb-deployment-plugin =0.1.0, =1.0.1, =1.0.2 Source cves:...

com.flowdock.jenkins:jenkins-flowdock-plugin (>=1.0.3, <=1.0.6), org.jenkins-ci.main:jenkins-test-harness (1.464) +6 more potentially affected by CVE-2026-53439 via org.jenkins-ci.main:jenkins-core (1.464)

org.jenkins-ci.main:jenkins-core MAVEN version 1.464 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.flowdock.jenkins:jenkins-flowdock-plugin =1.0.3, =0.11, =0.12 -...

io.relution.jenkins:scm-sqs (>=1.2, <=1.4), org.jenkins-ci.main:jenkins-test-harness (1.626) +6 more potentially affected by CVE-2026-53435 via org.jenkins-ci.main:jenkins-core (1.626)

org.jenkins-ci.main:jenkins-core MAVEN version 1.626 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - io.relution.jenkins:scm-sqs =1.2, =0.1, =0.2, =0.1, =1.21, =1.24 Source cves: CVE-2026-53435...

org.jenkins-ci.main:jenkins-test-harness (1.525), org.jenkins-ci.main:jenkins-war (1.525) +5 more potentially affected by CVE-2026-53436 via org.jenkins-ci.main:jenkins-core (1.525)

org.jenkins-ci.main:jenkins-core MAVEN version 1.525 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.525 - org.jenkins-ci.main:jenkins-war 1.525 -...

Langflow Vulnerability CVE-2026-5027 Exploited for Unauthenticated RCE

A high-severity security flaw in Langflow, an open-source low-code platform to build artificial intelligence AI applications, has come under active exploitation in the wild, according to findings from VulnCheck. The vulnerability in question is CVE-2026-5027 CVSS score: 8.8, a case of path...

CVE-2026-48859

The CVE affects Erlang/OTP’s SSH server (ssh_auth and ssh_options) in OTP prior to 29.0.2 (SSH 6.0.x before 6.0.1). When the daemon uses user_passwords or password options, ssh_auth:check_password/3 performs PBKDF2-SHA256 with 600,000 iterations (~300 ms) for valid usernames, but returns in ~0 ms...

CVE-2026-52757 Ghidra < 12.1 - Heap-use-after-free in HighVariable::merge() during decompilation

Ghidra before 12.1 contains a heap-use-after-free vulnerability in the decompiler's HighVariable::merge function during the variable merging pass. Attackers can trigger this vulnerability by crafting a binary that causes stale pointers in the HighIntersectTest::highedgemap cache to be dereference...

SUSE CVE-2026-46327

In the Linux kernel, the following vulnerability has been resolved: dm: fix unlocked test for dmsuspendedmd The function dmblkreportzones tests if the device is suspended with the "dmsuspendedmd" call. However, this function is called without holding any locks, so the device may be suspended just...

org.springframework.security:spring-security-cas (4.2.14.release), org.springframework.security:spring-security-openid (4.2.14.release) +2 more potentially affected by CVE-2026-47838 via org.springframework.security:spring-security-web (4.2.14.release)

org.springframework.security:spring-security-web MAVEN version 4.2.14.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - org.springframework.security:spring-security-cas...