Suhas Sunil Gaikwad

**Name of the Vulnerable Software and Affected Versions** Jenkins Google Login Plugin versions 1.3 and older **Description** An open redirect issue exists in the GoogleOAuth2SecurityRealm.java file, allowing attackers to redirect users to an arbitrary URL after a successful login. **Recommendations** For Jenkins Google Login Plugin versions 1.3 and older, update to version 1.3.1 or newer, which only performs redirects to relative URLs, to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Zulip Server versions 1.5.x through 1.7.1 **Description** There is an issue with muting notifications that leads to a cross-site scripting (XSS) problem. **Recommendations** For versions 1.5.x through 1.7.1, update to version 1.7.2 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Sidebar Link plugin (affected versions not specified) **Description** The issue concerns a lack of input validation in the Sidebar Link plugin, allowing users to configure jobs, views, and agents with links that use `javascript:` schemes. This could potentially lead to security issues, as users can inject malicious JavaScript code. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.