CVE-2026-57305

The Jenkins Assembla Plugin version 1.4 and earlier is vulnerable to a cross-site request forgery (CSRF) . The flaw exists because an HTTP endpoint used to test connections to an Assembla server lacks a permission check and does not require POST requests . This allows an attacker with Overall/Rea...

Updated ruby-mail packages fix security vulnerability

The Mail library does not impose a length limit on email addresses, so an attacker can send a long spam message via a recipient address unless there is a limit on the application's side. The attacker-injected message in the recipient address is processed by the server. This type of vulnerability...