Jenkins LoadNinja Plugin 2.1 and earlier does not mask LoadNinja API keys displayed on the job configuration form, increasing the potential for attackers to observe and capture them.
Advisories
| Source | ID | Title |
|---|---|---|
Github GHSA |
GHSA-p9hg-wrmv-v8cp | Jenkins LoadNinja Plugin does not mask LoadNinja API keys displayed on the job configuration form |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Thu, 19 Mar 2026 09:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Jenkins Project
Jenkins Project jenkins Loadninja Plugin |
|
| Vendors & Products |
Jenkins Project
Jenkins Project jenkins Loadninja Plugin |
Wed, 18 Mar 2026 15:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Jenkins LoadNinja Plugin 2.1 and earlier does not mask LoadNinja API keys displayed on the job configuration form, increasing the potential for attackers to observe and capture them. | |
| References |
|
Projects
Sign in to view the affected projects.
Status: PUBLISHED
Assigner: jenkins
Published:
Updated: 2026-03-18T15:15:26.527Z
Reserved: 2026-03-17T15:04:07.616Z
Link: CVE-2026-33004
No data.
Status : Awaiting Analysis
Published: 2026-03-18T16:16:28.457
Modified: 2026-03-19T13:25:00.570
Link: CVE-2026-33004
No data.
OpenCVE Enrichment
Updated: 2026-03-19T08:56:33Z
Weaknesses
No weakness.
Github GHSA