Export limit exceeded: 11547 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2026-48925

CSRF Vulnerability Allows Unauthorized Build Trigger in Jenkins GitHub Integration Plugin

A cross-site request forgery (CSRF) vulnerability in Jenkins GitHub Integration Plugin 0.7.3 and earlier allows attackers to attackers to trigger a build for a pull request.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Jenkins Project Kostyasha
Products
Jenkins Github Plugin Github Integration
CVE-2026-42523

Stored XSS via Improper Job URL Handling in Jenkins GitHub Plugin

Jenkins GitHub Plugin 1.46.0 and earlier improperly processes the current job URL as part of JavaScript implementing validation of the feature "GitHub hook trigger for GITScm polling", resulting in a stored cross-site scripting (XSS) vulnerability exploitable by non-anonymous attackers with Overall/Read permission.

CVSS 3.1 · 9 Critical EPSS < 1% KEV · Not listed
Vendors
Jenkins Jenkins Project
Products
Github Jenkins Github Plugin