https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-09-30T21:50:58.301484+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-53441 CVE-2026-53441 2026-09-30T21:50:58.302974+00:00

Affected: Jenkins Project Jenkins

Jenkins 2.483 through 2.567 (both inclusive), LTS 2.492.1 through 2.555.2 (both inclusive) does not escape the user-provided description of a generic offline cause that could be set through the `POST config.xml` API, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Agent/Configure permission.

 https://db.gcve.eu/vuln/ghsa-93qh-vwrm-c5pw GHSA-93qh-vwrm-c5pw — Jenkins: Stored XSS vulnerability in node offline cause description 2026-09-30T21:50:58.303047+00:00

Affected: Maven: org.jenkins-ci.main:jenkins-core

Jenkins 2.483 through 2.567 (both inclusive), LTS 2.492.1 through 2.555.2 (both inclusive) does not escape the user-provided description of a generic offline cause that could be set through the `POST config.xml` API, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Agent/Configure permission.