CVE-2026-33004

The Jenkins LoadNinja Plugin (version 2.1 and earlier ) contains a security vulnerability where LoadNinja API keys are not masked when displayed on the job configuration form. This flaw increases the risk of attackers observing and capturing sensitive credentials. Furthermore, these keys are stor...

CVE-2026-33003

The Jenkins LoadNinja Plugin version 2.1 and earlier is vulnerable to credential leakage because it stores LoadNinja API keys unencrypted in the config.xml files on the Jenkins controller. This allows users with Item/Extended Read permissions or direct access to the controller's file system to vi...