Open Source Vulnerabilities

webkit2gtk, webkit2gtk, webkit2gtk, wpewebkit, wpewebkit, wpewebkit

webkit2gtk, webkit2gtk, webkit2gtk, wpewebkit, wpewebkit, wpewebkit

qtwebkit-opensource-src, webkit2gtk, qtwebkit-source, webkitgtk, webkit2gtk, qtwebkit-opensource-src, qtwebkit-source, webkitgtk, webkit2gtk, qtwebkit-opensource-src, wpewebkit, qtwebkit-opensource-src, webkit2gtk, wpewebkit, qtwebkit-opensource-src

XWiki Platform XSS vulnerability from account in the create page form via template provider

pip

Command Injection in pip when used with Mercurial

io.jenkins.plugins:teams-webhook-trigger

Jenkins MSTeams Webhook Trigger Plugin uses non-constant time webhook token comparison

io.jenkins.plugins:warnings-ng, io.jenkins.plugins:warnings-ng

Jenkins Warnings Plugin exposures system-scoped credentials

org.jenkins-ci.plugins:zanata

Non-constant time webhook token hash comparison in Jenkins Zanata Plugin

igalg.jenkins.plugins:multibranch-scan-webhook-trigger

Jenkins Multibranch Scan Webhook Trigger Plugin uses non-constant time webhook token comparison

org.jenkins-ci.plugins:gogs-webhook

Jenkins Gogs Plugin uses non-constant time webhook token comparison

org.jenkins-ci.plugins:electricflow

Jenkins CloudBees CD Plugin vulnerable to arbitrary file read

org.jenkins-ci.plugins:lambdatest-automation

Jenkins lambdatest-automation Plugin may expose Credentials access token

org.jenkins-ci.plugins:trac

Jenkins Edgewall Trac Plugin vulnerable to Stored XSS

org.jenkins-ci.plugins:electricflow

Jenkins CloudBees CD Plugin vulnerable to arbitrary file deletion

com.coravy.hudson.plugins.github:github

Stored XSS vulnerability in Jenkins GitHub Plugin

org.jenkins-ci.plugins:lambdatest-automation

Jenkins lambdatest-automation Plugin missing permission check

org.dom4j:dom4j

Withdrawn Advisory: dom4j XML Entity Expansion vulnerability

cn.dev33:sa-token-core

SaToken privilege escalation vulnerability

tribalsystems/zenario

Zenario CMS Cross-site Scripting vulnerability

cn.dev33:sa-token-core

SaToken authentication bypass vulnerability