CVE-2026-59947

A flaw was found in Composer, a dependency manager for the PHP language. When Composer is executed with the -vvv debug verbosity option, it can inadvertently expose sensitive credentials, such as a GitHub Personal Access Token, by printing them in the debug output. This occurs because certain...

CVE-2021-21663

A missing permission check in Jenkins XebiaLabs XL Deploy Plugin 7.5.8 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing Username/password credentials stored in...