PatchTheCVEvaddy vulnerabilities and fixes
Recent CVEs affecting vaddy, with upgrade or downgrade steps. 2 tracked.
vaddy has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2025-07-09. Highest priority: CVE-2025-53668 (score 27/100).
- CVE-2025-53669 MEDIUM 4.3 UPGRADE Jenkins VAddy Plugin 1.2.8 and earlier does not mask Vaddy API Auth Keys displayed on the job configuration fo
- CVE-2025-53668 MEDIUM 6.5 UPGRADE Jenkins VAddy Plugin 1.2.8 and earlier stores Vaddy API Auth Keys unencrypted in job config.xml files on the J
FAQ
How do I fix vaddy vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is vaddy being exploited right now?
None of the tracked vaddy CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which vaddy CVE should I patch first?
CVE-2025-53668 currently ranks highest (27/100): Jenkins VAddy Plugin 1.2.8 and earlier stores Vaddy API Auth Keys unencrypted in job config.xml files on the J.