GitHub Advisoryadvisory · Maven

GHSA-p9hg-wrmv-v8cp Jenkins LoadNinja Plugin does not mask LoadNinja API keys displayed on the job configuration form

MEDIUM Published 2026-03-18 Modified 2026-03-20 Official page ↗
Aliases
CVE-2026-33004
Ecosystem
Maven
Packages
org.jenkins-ci.plugins:loadninja
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Weaknesses
CWE-312
Reviewed
2026-03-19

Affected packages

• Maven org.jenkins-ci.plugins:loadninja: < 2.2 → fixed in 2.2

Description

Jenkins LoadNinja Plugin 2.1 and earlier does not mask LoadNinja API keys displayed on the job configuration form, increasing the potential for attackers to observe and capture them.

Related

Alias · CVE (1)

  • CVE-2026-33004 Jenkins LoadNinja Plugin 2.1 and earlier does not mask LoadNinja API keys displayed on the job configuration form, increasing the potential… vulnerability

Weakness · CWE (1)

  • CWE-312 Cleartext Storage of Sensitive Information weakness

References