Checkmarx Codebashing

• CVE-2026-42994 ↗CRITICAL 9.82026

  Bitwarden CLI 2026.4.0 from 2026-04-22T21:57Z to 2026-04-22T23:30Z, when obtained from npm, had embedded malicious code. This is related to a Checkmarx supply chain incident.

• CVE-2023-35142 ↗HIGH 8.12023

  Jenkins Checkmarx Plugin 2022.4.3 and earlier disables SSL/TLS validation for connections to the Checkmarx server by default.

• CVE-2022-46684 ↗MEDIUM 5.42022

  Jenkins Checkmarx Plugin 2022.3.3 and earlier does not escape values returned from the Checkmarx service API before inserting them into HTML reports, resulting in a stored cross-site scripting (XSS) v…

• …and 3 more · see all on the vendor page →

No datasheets, whitepapers, case studies, videos, or demos linked yet.

• BSG Secure Development Lifecycle Training · BSG
• BSG Web Application Pentester Training · BSG
• BinaryMist · BinaryMist
• CMD+CTRL Base Camp · CMD+CTRL Security
• Hacksplaining for Teams · Hacksplaining
• Immersive Labs App Security Training · Immersive Labs
• NINJIO Secure Code · NINJIO
• PentesterLab Master Advanced Web Hacking · PentesterLab