Known Vulnerabilities for Credentials by Jenkins
Listed below are 3 of the newest known vulnerabilities associated with "Credentials" by "Jenkins".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-115353 json | Mistune before 3.3.0 contains a path traversal vulnerability in the RST include directive that allows attackers to read arbit... | Not Provided | 2026-10-22 | 2026-10-22 |
| CVE-2026-114657 json | Grav from 2.0.0 before 2.2.5 contains an information disclosure vulnerability that allows page authors to capture visitors' H... | Not Provided | 2026-10-22 | 2026-10-22 |
| CVE-2026-114655 json | libmongocrypt builds requests to external key management services (AWS, Azure and GCP) by inserting values from key vault doc... | Not Provided | 2026-10-22 | 2026-10-22 |
| CVE-2026-114646 json | A data-validation flaw exists in the BSON handling and binary serialization path of the MongoDB C# Driver. When an applicatio... | Not Provided | 2026-10-22 | 2026-10-22 |
| CVE-2026-114489 json | Missing authorization in the REST and COM administration APIs of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a r... | Not Provided | 2026-10-21 | 2026-10-21 |
| CVE-2026-114471 json | Insertion of sensitive information into a log file in the SMTP server of Progressive Robot hMailServer 6.0.0 through 6.3.6 al... | Not Provided | 2026-10-21 | 2026-10-21 |
| CVE-2026-114391 json | ZenTao PMS before 22.3 contains an authorization bypass vulnerability in commonModel::isOpenMethod() that lets logged-in user... | Not Provided | 2026-10-21 | 2026-10-21 |
| CVE-2026-114219 json | NT OneAPP developed by NewType Infortech has a Hard-coded Credentials vulnerability. Unauthenticated remote attackers can obt... | Not Provided | 2026-10-22 | 2026-10-22 |
| CVE-2026-114137 json | Django REST framework is a toolkit for building Web APIs. From 3.12.0 until 3.18.2, TokenProxy.delete() in rest_framework/aut... | Not Provided | 2026-10-21 | 2026-10-21 |
| CVE-2026-114135 json | Jupyter Server is the backend for Jupyter web applications. From 2.0.0 until 2.6.0, enabling GatewayClient.url replaced the n... | Not Provided | 2026-10-21 | 2026-10-21 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Jenkins | Credentials | 2.1.9 | |||
| Application | Jenkins | Credentials | 2.1.8 | |||
| Application | Jenkins | Credentials | 2.1.7 | |||
| Application | Jenkins | Credentials | 2.1.6 | |||
| Application | Jenkins | Credentials | 2.1.5 | |||
| Application | Jenkins | Credentials | 2.1.4 | |||
| Application | Jenkins | Credentials | 2.1.3 | |||
| Application | Jenkins | Credentials | 2.1.2 | |||
| Application | Jenkins | Credentials | 2.1.19 | |||
| Application | Jenkins | Credentials | 2.1.18 | |||
| Application | Jenkins | Credentials | 2.1.17 | |||
| Application | Jenkins | Credentials | 2.1.16 | |||
| Application | Jenkins | Credentials | 2.1.15 | |||
| Application | Jenkins | Credentials | 2.1.14 | |||
| Application | Jenkins | Credentials | 2.1.13 | |||
| Application | Jenkins | Credentials | 2.1.12 | |||
| Application | Jenkins | Credentials | 2.1.11 | |||
| Application | Jenkins | Credentials | 2.1.10 | |||
| Application | Jenkins | Credentials | 2.1.1 | |||
| Application | Jenkins | Credentials | 2.1.0 |