Curseforge Publisher (Jenkins) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2025-10-29. Vendor: Jenkins.

CVEs of Curseforge Publisher

• CVE-2025-64147 - CVSS 4.3 (medium), 2025-10-29: Jenkins Curseforge Publisher Plugin 1.0 does not mask API Keys displayed on the job configuration form, increasing the potential for attackers to observe and…
• CVE-2025-64146 - CVSS 4.3 (medium), 2025-10-29: Jenkins Curseforge Publisher Plugin 1.0 stores API Keys unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with…