VYPR

Google Chat Notification Plugin

by Jenkins Project

CVEs (1)

  • CVE-2026-70442MedAug 5, 2026
    risk 0.28cvss 4.3epss 0.00

    Jenkins Google Chat Notification Plugin 166.ve6b_de280f2e8 and earlier does not set the appropriate context for credentials lookup, allowing attackers with Item/Configure permission to access and capture credentials they are not entitled to use.