CVE-2026-42521

creationtimestamp| type| source ---|---|--- 2026-04-29 14:35:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mknd2fatm72q...

CVE-2026-42521

Jenkins Matrix Authorization Strategy Plugin 2.0-beta-1 through 3.2.9 both inclusive invokes parameterless constructors of classes specified in configuration when deserializing inheritance strategies, without restricting the classes that can be instantiated, allowing attackers with Item/Configure...