Open Source Vulnerabilities

com.vmware.vcac:vmware-vrealize-codestream

Passwords stored in plain text by Jenkins Vmware vRealize CodeStream Plugin

org.jenkins-ci.plugins:gitlab-oauth

Client Secret stored in plain text by Jenkins GitLab Authentication Plugin

org.jenkins-ci.plugins:release-helper

CSRF vulnerability in Jenkins Release Helper Plugin

org.jenkins-ci.plugins:kubernetes-cd

CSRF vulnerability in Jenkins kubernetes-cd Plugin allow capturing credentials

org.jenkins-ci.plugins:global-build-stats

Stored Cross-site Scripting vulnerability in Jenkins global-build-stats Plugin

org.jenkins-ci.plugins:dbCharts

Passwords stored in plain text by Jenkins dbCharts Plugin

org.jenkins-ci.plugins:extended-choice-parameter

CSRF vulnerability and missing permission checks in Extended Choice Parameter Plugin allow SSRF

io.jenkins.plugins:environment-dashboard

Stored Cross-site Scripting vulnerability in Jenkins Environment Dashboard Plugin

org.jenkins-ci.plugins:kubernetes-cd

CSRF vulnerability and missing permission checks in Jenkins kubernetes-cd Plugin allow capturing credentials

com.incapptic.plugins:incapptic-connect-uploader

Personal tokens stored in plain text by Jenkins incapptic connect uploader Plugin

org.jenkins-ci.plugins:kubernetes-cd

Arbitrary file read vulnerability in Jenkins kubernetes-cd Plugin

org.jenkins-ci.plugins:release-helper

Missing permission checks in Jenkins Release Helper Plugin

nicotine-plus

Nicotine+ DoS on Null Character in Download Request

code.gitea.io/gitea

Path Traversal in Gitea

Regular expression Denial of Service in dialog plugin

Cross-site Scripting in CKEditor4

python-scrapy

python-scrapy - security update

expat, expat-devel

Important: expat security update

bind9, bind9, bind9, bind9, bind9

bind9

bind9

bind9