Verified Advisories
Concise advisories for CRITICAL/HIGH vulnerabilities – affected and fixed versions confirmed against the vendor's own advisory before publishing. 9 total.
Cross-site request forgery in Jenkins Multijob Plugin (CVE-2026-70432)
Multijob Plugin 669.v9d96a_d9c71b_0 and earlier does not require POST requests for a form validation endpoint, resulting in a cross-site request forgery (CSRF) vulnerability. Attackers can exploit this flaw to execute...
Fixed in Multijob Plugin 677.v7ffc23d6a_4c2
Groovy script sandbox escape in Jenkins Multijob Plugin (CVE-2026-70431)
Multijob Plugin 669.v9d96a_d9c71b_0 and earlier exposes Groovy scripting features that do not integrate with the Script Security Plugin, bypassing sandbox controls. Attackers with Item/Create or Item/Configure permiss...
Fixed in Multijob Plugin 677.v7ffc23d6a_4c2
Pre-authentication stack overflow in Apache Qpid Proton Dotnet (CVE-2026-67552)
A pre-authentication attacker can exploit unbounded type nesting in Apache Qpid Proton Dotnet to trigger a StackOverflowError, potentially causing denial of service. No authentication is required to trigger this condi...
Fixed in 1.1.0
Pre-authentication denial of service in Apache Qpid ProtonJ2 (CVE-2026-67589)
A pre-authentication attacker can exploit improper type size/count handling in Apache Qpid ProtonJ2 to trigger excessive memory allocation, leading to potential denial of service. No authentication is required to expl...
Fixed in 1.2.0
Pre-authentication denial of service in Apache Qpid ProtonJ2 (CVE-2026-67588)
Apache Qpid ProtonJ2 contains a vulnerability in its symbol value caching mechanism that imposes no upper bound on cache growth. A pre-authentication attacker can exploit this to exhaust server resources, resulting in...
Fixed in 1.2.0
Pre-authentication stack overflow in Apache Qpid ProtonJ2 (CVE-2026-67590)
A pre-authentication attacker can exploit unbounded type nesting in Apache Qpid ProtonJ2 to trigger a StackOverflowError, potentially causing denial of service. Because the vulnerability is reachable before authentica...
Fixed in 1.2.0
Uncontrolled resource consumption in Apache Qpid ProtonJ2 (CVE-2026-67592)
Apache Qpid ProtonJ2 did not enforce a maximum number of transfer frames per incoming delivery. An authenticated attacker could exploit this to cause excessive resource usage and potential denial of service.
Fixed in 1.2.0
Pre-authentication denial of service in Apache Qpid Proton-J (CVE-2026-66273)
Apache Qpid Proton-J contains a flaw in type size/count handling that allows a pre-authentication attacker to trigger excessive memory allocation. This can lead to a potential denial of service condition.
Fixed in 0.35.0
Pre-authentication resource exhaustion in Apache Qpid Proton-J (CVE-2026-66257)
Apache Qpid Proton-J contains a vulnerability in which symbol values are cached without bound, allowing a pre-authentication attacker to exhaust server resources. Successful exploitation results in denial of service.
Fixed in 0.35.0