https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-53743.htmlhttps://patchthecve.com/cve/CVE-2025-53743.htmlWed, 17 Jun 2026 09:38:49 +0000MEDIUM 5.3: Jenkins Applitools Eyes Plugin 1.16.5 and earlier does not mask Applitools API keys displayed on the job configuration form, increasing the potential for attackers to observe and capture them.https://patchthecve.com/cve/CVE-2025-53742.htmlhttps://patchthecve.com/cve/CVE-2025-53742.htmlWed, 17 Jun 2026 09:38:49 +0000MEDIUM 6.5: Jenkins Applitools Eyes Plugin 1.16.5 and earlier stores Applitools API keys unencrypted in job config.xml files on the Jenkins controller, where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system.https://patchthecve.com/cve/CVE-2025-53658.htmlhttps://patchthecve.com/cve/CVE-2025-53658.htmlWed, 17 Jun 2026 09:38:39 +0000MEDIUM 5.4: Jenkins Applitools Eyes Plugin 1.16.5 and earlier does not escape the Applitools URL on the build page, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.