JC
Product
Jenkins Curseforge Publisher Plugin
2
CVEs
0
On KEV
4.3
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 2Low 0
Watch
Add Jenkins Curseforge Publisher Plugin to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-64147 | 4.3 | Oct 29 | Jenkins Curseforge Publisher Plugin 1.0 does not mask API Keys displayed on the job configuration form, increasing the potential for attackers to observe and capture them Affected: through 1.0 |
| CVE-2025-64146 | 4.3 | Oct 29 | Jenkins Curseforge Publisher Plugin 1.0 stores API Keys unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read… Affected: through 1.0 |
Showing 2