Security advisories

medium2025-07-09

CVE-2025-53662-Jenkins IFTTT Build Notifier Plugin vulnerability exposes IFTTT Maker Channel Keys

jenkinsci/ifttt-build-notifier-plugin · GHSA-jxwj-qccf-4896

high2025-07-09

CVE-2025-53658-Jenkins Applitools Eyes Plugin vulnerable to XSS through its Build page

jenkinsci/applitools-eyes-plugin · GHSA-j4wf-9gx8-63f8

medium2025-07-09

CVE-2025-53672-Jenkins Kryptowire Plugin vulnerability stores unencrypted Kryptowire API key

jenkinsci/kryptowire-plugin · GHSA-cvg7-767r-w3fq

medium2025-07-09

CVE-2025-53660-Jenkins QMetry Test Management Plugin vulnerability exposes API keys

jenkinsci/qmetry-test-management-plugin · GHSA-962q-84v8-hxhj

medium2025-07-09

CVE-2025-53673-Jenkins Sensedia API Platform Plugin vulnerability exposes unencrypted tokens in its global configuration file

jenkinsci/sensedia-api-platform-plugin · GHSA-93j6-jcjw-3rwp

low2025-07-09

CVE-2025-53661-Jenkins Testsigma Test Plan vulnerability exposes API keys via job configuration form

jenkinsci/testsigma-plugin · GHSA-8wp4-r84g-gcmw

medium2025-07-09

CVE-2025-53656-Jenkins ReadyAPI Functional Testing Plugin vulnerability stores unencrypted authentication credentials

jenkinsci/soapui-pro-functional-testing-plugin · GHSA-884f-p57j-f258

medium2025-07-09

CVE-2025-53666-Jenkins Dead Man's Snitch Plugin vulnerability stores tokens in plain text

jenkinsci/deadmanssnitch-plugin · GHSA-5pcv-7v3q-hw8j

medium2025-07-09

CVE-2025-53671-Jenkins Nouvola DiveCloud Plugin vulnerability does not mask keys on its job configuration form

jenkinsci/nouvola-divecloud-plugin · GHSA-4v4v-92cx-x4f4

medium2025-07-09

CVE-2025-53670-Jenkins Nouvola DiveCloud Plugin vulnerability stores unencrypted credentials

jenkinsci/nouvola-divecloud-plugin · GHSA-45hr-8gq6-7f7f

medium2025-07-09

CVE-2025-53665-Jenkins Apica Loadtest Plugin vulnerability exposes authentication tokens

jenkinsci/apica-loadtest-plugin · GHSA-28j3-hphh-cjr8

medium2025-07-09

CVE-2025-53655-Jenkins Statistics Gatherer Plugin does not mask AWS Secret Key

jenkinsci/statistics-gatherer-plugin · GHSA-26x3-7jw5-7mg4

medium2025-07-09

CVE-2025-53652-Jenkins Git Parameter Plugin vulnerable to code injection due to inexhaustive parameter check

jenkinsci/git-parameter-plugin · GHSA-qcj2-99cg-mppf

medium2025-07-09

CVE-2025-53653-Jenkins Aqua Security Scanner Plugin vulnerability exposes scanner tokens

jenkinsci/aqua-security-scanner-plugin · GHSA-3wgg-3j4j-3f69

medium2025-07-09

CVE-2025-53654-Jenkins Statistics Gatherer Plugin vulnerability exposes AWS Secret Key

jenkinsci/statistics-gatherer-plugin · GHSA-3c9f-c64m-h4wc

medium2025-07-09

CVE-2025-53651-Jenkins HTML Publisher Plugin vulnerability displays controller file system information in its logs

jenkinsci/htmlpublisher-plugin · GHSA-367v-5ppj-2hrx

medium2025-07-09

CVE-2025-53650-Jenkins Credentials Binding Plugin vulnerability can expose sensitive information in logger messages

jenkinsci/credentials-binding-plugin · GHSA-9768-hprv-crj5

critical2025-07-09

CVE-2025-53620-Qwik's unhandled exception vulnerabilty can cause server crashes from malicious requests

qwikdev/qwik · GHSA-qr9h-j6xg-2j72

high2025-07-09

CVE-2025-53548-@clerk/backend Performs Insufficient Verification of Data Authenticity

clerk/javascript · GHSA-9mp4-77wg-rwx9

low2025-07-09

Contrast vulnerability allows arbitrary host data Injection into container VOLUME mount points

edgelesssys/contrast · GHSA-phhq-63jg-fp7r