Open Source Vulnerabilities

firebase/php-jwt

Firebase PHP-JWT key/algorithm type confusion

org.jenkins-ci.plugins:proxmox

SSL/TLS certificate validation globally disabled by Jenkins Proxmox Plugin

com.shopizer:shopizer

Cross site scripting in Shopizer

io.jenkins.plugins:atlassian-bitbucket-server-integration

Stored XSS vulnerability in Jenkins Bitbucket Server Integration Plugin

org.jenkins-ci.plugins:ci-with-toad-edge

Arbitrary file read vulnerability in Jenkins Continuous Integration with Toad Edge Plugin

com.surenpi.jenkins:phoenix-autotest

XML External Entity Reference vulnerability in Jenkins Pipeline: Phoenix AutoTest Plugin

org.jenkins-ci.plugins:rocketchatnotifier

Missing permission check in Jenkins RocketChat Notifier Plugin

org.jenkins-ci.plugins:JiraTestResultReporter

Missing permission check in Jenkins JiraTestResultReporter Plugin

org.jvnet.hudson.plugins:instant-messaging

Plaintext storage in Jenkins instant-messaging Plugin

io.jenkins.plugins:atlassian-bitbucket-server-integration

Missing permission checks in Jekins Bitbucket Server Integration Plugin

org.jenkins-ci.plugins:flaky-test-handler

XXE vulnerability in Jenkins Flaky Test Handler Plugin

org.jenkins-ci.plugins:JiraTestResultReporter

CSRF vulnerability and missing permission check in Jenkins JiraTestResultReporter Plugin

org.jenkins-ci.plugins:proxmox

Password stored in plain text by Jenkins Proxmox Plugin

org.jenkins-ci.plugins:rocketchatnotifier

CSRF vulnerability in Jenkins RocketChat Notifier Plugin

org.jenkins-ci.plugins:proxmox

Missing permission checks in Jenkins Proxmox Plugin

com.surenpi.jenkins:phoenix-autotest

Path traversal in Jenkins Phoenix AutoTest Plugin

org.jenkins-ci.plugins:ci-with-toad-edge

Cross-site Scripting (XSS) vulnerability in Jenkins Continuous Integration with Toad Edge Plugin

org.jenkins-ci.plugins:proxmox

CSRF vulnerability in Proxmox Plugin

com.synopsys.jenkinsci:ownership

Missing permission check in Jenkins Job and Node ownership Plugin

com.synopsys.jenkinsci:ownership

Cross site request forgery in Jenkins Job and Node ownership Plugin

org.jenkins-ci.plugins:ci-with-toad-edge

Missing permission check in Jenkins Continuous Integration with Toad Edge Plugin

org.jenkins-ci.plugins:covcomplplot

enkins Coverage/Complexity Scatter Plot Plugin XML External Entity Reference vulnerability

com.synopsys.jenkinsci:ownership

CSRF vulnerability in Jenkins Job and Node ownership Plugin

org.jenkins-ci.plugins:ci-with-toad-edge

Path traversal vulnerability on Windows in Jenkins Continuous Integration with Toad Edge Plugin

org.jvnet.hudson.plugins:sitemonitor

Cross-site Scripting in Jenkins SiteMonitor Plugin

com.synopsys.jenkinsci:ownership

Stored Cross-site Scripting vulnerability in Jenkins Job and Node ownership Plugin

com.surenpi.jenkins:phoenix-autotest

Path traversal in Jenkins Pipeline Phoenix AutoTest Plugin

org.jenkins-ci.plugins:selected-tests-executor

Arbitrary file read vulnerability in Jenkins Tests Selector Plugin

com.surenpi.jenkins:phoenix-autotest

Missing permission Jenkins Pipeline Phoenix AutoTest Plugin

org.jenkins-ci.plugins:selected-tests-executor

Stored Cross-site Scripting vulnerability in Jenkins Tests Selector Plugin

salt, salt, salt

SaltStack Improper Verification of Cryptographic Signature

salt, salt, salt

SaltStack Salt Authentication Bypass by Capture-replay

salt, salt, salt

SaltStack Salt Improper Authentication via Man in the Middle Attack

salt, salt, salt

SaltStack Salt Permissions Bypass

libgc

libgc - security update

Infinite Loop in PJSIP

heap buffer overflow in get_one_sourceline in vim/vim

Use after free in utf_ptr2char in vim/vim

statamic/cms, statamic/cms

Discoverability of user password hash in Statamic CMS

deno

Sandbox bypass leading to arbitrary code execution in Deno

nvidia-cuda-toolkit, nvidia-cuda-toolkit, nvidia-cuda-toolkit