Jenkins - Jenkins Github Plugin - CRITICAL - CVE-2026-42523. The Jenkins GitHub Plugin prior to version 1.46.0 contains a stored cross-site scripting vulnerability. This issue arises from improper handling of the current job URL during JavaScript validation for the 'GitHub hook trigger for GITScm polling' feature. Non-anonymous attackers with Overall/Read permission can exploit this vulnerability, potentially compromising the integrity of affected Jenkins installations and allowing for unauthorized actions within the application.