CVE-2026-42523

The Jenkins GitHub Plugin (versions 1.46.0 and earlier) contains a stored cross-site scripting (XSS) vulnerability. The root cause is the improper processing of the current job URL within the JavaScript used to validate the "GitHub hook trigger for GITScm polling" feature. This flaw allows non-an...