Nixpkgs security tracker

Login with GitHub
⚠️ You are using a production deployment that is still only suitable for demo purposes. Any work done in this might be wiped later without notice.

Suggestion detail

Dismissed
(no matching packages found)
Permalink CVE-2026-70434
created 1 month ago Activity log
  • Created & dismissed (no matching packages found) suggestion 1 month ago
A cross-site request forgery (CSRF) vulnerability in Jenkins SCM-Manager Plugin …

A cross-site request forgery (CSRF) vulnerability in Jenkins SCM-Manager Plugin 1.11.1 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.

References

Affected products

Jenkins SCM-Manager Plugin
  • =<1.11.1