API - API Security Blog

CVE-2025-50123

creation_timestamp| type| source ---|---|--- 2025-07-10 01:48:46+00:00| seen|...Read More ...

July 10, 2025

Jenkins Applitools Eyes Plugin vulnerability exposes unencrypted keys to certain authenticated users

Jenkins Applitools Eyes Plugin 1.16.5 and earlier stores Applitools API keys unencrypted in job config.xml files on the Jenkins controller, where they can be viewed by users with Item/Extended Read pe ...

July 10, 2025

Jenkins VAddy Plugin vulnerability exposes unencrypted keys to certain authenticated users

Jenkins VAddy Plugin 1.2.8 and earlier stores Vaddy API Auth Keys unencrypted in job config.xml files on the Jenkins controller, where they can be viewed by users with Item/Extended Read permission or ...

July 10, 2025

Jenkins Sensedia API Platform Plugin vulnerability exposes unencrypted tokens

Jenkins Sensedia Api Platform tools Plugin 1.0 does not mask the Sensedia API Manager integration token on the global configuration form, increasing the potential for attackers to observe and capture. ...

July 10, 2025

docusaurus-plugin-content-gists vulnerability exposes GitHub Personal Access Token

GitHub Personal Access Token Exposure in docusaurus-plugin-content-gists Summary docusaurus-plugin-content-gists versions prior to 4.0.0 are vulnerable to exposing GitHub Personal Access Tokens in pro ...

July 10, 2025

Jenkins Applitools Eyes Plugin vulnerability does not mask API keys on its job configuration form

Jenkins Applitools Eyes Plugin 1.16.5 and earlier does not mask Applitools API keys displayed on the job configuration form, increasing the potential for attackers to observe and capture...Read More ...

July 10, 2025

CVE-2025-24477

creation_timestamp| type| source ---|---|--- 2025-07-09 23:36:53+00:00| seen|...Read More ...

July 10, 2025

CVE-2025-5451

creation_timestamp| type| source ---|---|--- 2025-07-09 23:34:07+00:00| seen|...Read More ...

July 10, 2025