Jenkins Kubernetes Plugin 3909.v1f2c633e8590 and earlier does not properly mask (i.e., replace with asterisks) credentials in the build log when push mode for durable task logging is enabled.
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-112988.json"