org.jenkins-ci.main:jenkins-test-harness (1.558), org.jenkins-ci.main:jenkins-war (1.558) +1 more potentially affected by CVE-2026-53437 via org.jenkins-ci.main:jenkins-core (1.558)

org.jenkins-ci.main:jenkins-core MAVEN version 1.558 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.558 - org.jenkins-ci.main:jenkins-war 1.558 -...

com.cloudbees.jenkins.plugins:bees-sdk-plugin (>=1.0, <=1.2), com.cloudbees.jenkins.plugins:cloudbees-credentials (3.3) +48 more potentially affected by CVE-2026-53437 via org.jenkins-ci.main:jenkins-core (1.509)

org.jenkins-ci.main:jenkins-core MAVEN version 1.509 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.cloudbees.jenkins.plugins:bees-sdk-plugin =1.0, =0.1.0, =0.1-beta-1, =0.10, =13.5.0, =13.5....

org.jenkins-ci.main:jenkins-test-harness (1.495), org.jenkins-ci.main:jenkins-war (1.495) +6 more potentially affected by CVE-2026-53438 via org.jenkins-ci.main:jenkins-core (1.495)

org.jenkins-ci.main:jenkins-core MAVEN version 1.495 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.495 - org.jenkins-ci.main:jenkins-war 1.495 -...

jp.shiftinc.jenkins.plugins:discard-old-build (>=1.04, <=1.05), org.jenkins-ci.main:jenkins-test-harness (1.515) +6 more potentially affected by CVE-2026-53438 via org.jenkins-ci.main:jenkins-core (1.515)

org.jenkins-ci.main:jenkins-core MAVEN version 1.515 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - jp.shiftinc.jenkins.plugins:discard-old-build =1.04, =1.05 -...

com.github.mjdetullio.jenkins.plugins:multi-branch-project-plugin (>=0.6, <=0.7), com.inedo.buildmaster:inedo-buildmaster (>=1.4, <=1.6) +93 more potentially affected by CVE-2026-53436 via org.jenkins-ci.main:jenkins-core (1.642.3)

org.jenkins-ci.main:jenkins-core MAVEN version 1.642.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.github.mjdetullio.jenkins.plugins:multi-branch-project-plugin =0.6, =1.4, =0.1, =6.1.0,...

com.dabsquared:gitlab-plugin (1.0.5), org.jenkins-ci.main:jenkins-test-harness (1.564) +3 more potentially affected by CVE-2026-53438 via org.jenkins-ci.main:jenkins-core (1.564)

org.jenkins-ci.main:jenkins-core MAVEN version 1.564 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.dabsquared:gitlab-plugin 1.0.5 - org.jenkins-ci.main:jenkins-test-harness 1.564 -...

org.jenkins-ci.main:jenkins-test-harness (1.466.1), org.jenkins-ci.main:jenkins-war (1.466.1) +2 more potentially affected by CVE-2026-53437 via org.jenkins-ci.main:jenkins-core (1.466.1)

org.jenkins-ci.main:jenkins-core MAVEN version 1.466.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.466.1 - org.jenkins-ci.main:jenkins-war 1.466.1 -...

org.jenkins-ci.main:jenkins-test-harness (1.447.1), org.jenkins-ci.main:jenkins-war (1.447.1) +2 more potentially affected by CVE-2026-53440 via org.jenkins-ci.main:jenkins-core (1.447.1)

org.jenkins-ci.main:jenkins-core MAVEN version 1.447.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.447.1 - org.jenkins-ci.main:jenkins-war 1.447.1 -...

org.jenkins-ci.main:jenkins-test-harness (1.494), org.jenkins-ci.main:jenkins-war (1.494) +9 more potentially affected by CVE-2026-53440 via org.jenkins-ci.main:jenkins-core (1.494)

org.jenkins-ci.main:jenkins-core MAVEN version 1.494 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.494 - org.jenkins-ci.main:jenkins-war 1.494 -...

org.jenkins-ci.main:jenkins-test-harness (1.624), org.jenkins-ci.main:jenkins-war (1.624) +2 more potentially affected by CVE-2026-53436 via org.jenkins-ci.main:jenkins-core (1.624)

org.jenkins-ci.main:jenkins-core MAVEN version 1.624 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.624 - org.jenkins-ci.main:jenkins-war 1.624 -...

org.jenkins-ci.main:jenkins-test-harness (1.498), org.jenkins-ci.main:jenkins-war (1.498) +8 more potentially affected by CVE-2026-53442 via org.jenkins-ci.main:jenkins-core (1.498)

org.jenkins-ci.main:jenkins-core MAVEN version 1.498 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.498 - org.jenkins-ci.main:jenkins-war 1.498 -...

org.jenkins-ci.main:jenkins-test-harness (1.533), org.jenkins-ci.main:jenkins-war (1.533) +8 more potentially affected by CVE-2026-53436 via org.jenkins-ci.main:jenkins-core (1.533)

org.jenkins-ci.main:jenkins-core MAVEN version 1.533 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.533 - org.jenkins-ci.main:jenkins-war 1.533 -...

org.jenkins-ci.main:jenkins-test-harness (1.621), org.jenkins-ci.main:jenkins-war (1.621) +2 more potentially affected by CVE-2026-53438 via org.jenkins-ci.main:jenkins-core (1.621)

org.jenkins-ci.main:jenkins-core MAVEN version 1.621 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.621 - org.jenkins-ci.main:jenkins-war 1.621 -...

org.jenkins-ci.main:jenkins-test-harness (1.543), org.jenkins-ci.main:jenkins-war (1.543) +1 more potentially affected by CVE-2026-53438 via org.jenkins-ci.main:jenkins-core (1.543)

org.jenkins-ci.main:jenkins-core MAVEN version 1.543 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.543 - org.jenkins-ci.main:jenkins-war 1.543 -...

org.jenkins-ci.main:jenkins-war (1.646), org.jenkins-ci.main:test (1.646) potentially affected by CVE-2026-53438 via org.jenkins-ci.main:jenkins-core (1.646)

org.jenkins-ci.main:jenkins-core MAVEN version 1.646 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-war 1.646 - org.jenkins-ci.main:test 1.646 Source cves:...

Langflow Vulnerability CVE-2026-5027 Exploited for Unauthenticated RCE

A high-severity security flaw in Langflow, an open-source low-code platform to build artificial intelligence AI applications, has come under active exploitation in the wild, according to findings from VulnCheck. The vulnerability in question is CVE-2026-5027 CVSS score: 8.8, a case of path...

CVE-2026-48859

The CVE affects Erlang/OTP’s SSH server (ssh_auth and ssh_options) in OTP prior to 29.0.2 (SSH 6.0.x before 6.0.1). When the daemon uses user_passwords or password options, ssh_auth:check_password/3 performs PBKDF2-SHA256 with 600,000 iterations (~300 ms) for valid usernames, but returns in ~0 ms...

CVE-2026-52757 Ghidra < 12.1 - Heap-use-after-free in HighVariable::merge() during decompilation

Ghidra before 12.1 contains a heap-use-after-free vulnerability in the decompiler's HighVariable::merge function during the variable merging pass. Attackers can trigger this vulnerability by crafting a binary that causes stale pointers in the HighIntersectTest::highedgemap cache to be dereference...

SUSE CVE-2026-46327

In the Linux kernel, the following vulnerability has been resolved: dm: fix unlocked test for dmsuspendedmd The function dmblkreportzones tests if the device is suspended with the "dmsuspendedmd" call. However, this function is called without holding any locks, so the device may be suspended just...

org.springframework.security:spring-security-cas (4.2.14.release), org.springframework.security:spring-security-openid (4.2.14.release) +2 more potentially affected by CVE-2026-47838 via org.springframework.security:spring-security-web (4.2.14.release)

org.springframework.security:spring-security-web MAVEN version 4.2.14.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-web and may be impacted: - org.springframework.security:spring-security-cas...