CVEvulnerability

CVE-2026-117612

Published 2026-10-28 Modified 2026-10-29 Official page ↗
Status
Awaiting Analysis
Published
2026-10-28
Last modified
2026-10-29
Assigner
[email protected]

Description

Jenkins 2.587 and earlier, LTS 2.580.1 and earlier does not apply its deserialization filter to classes referenced by the `resolves-to` attribute during XStream deserialization.

References