336 matches found
CVE-2026-52740: Incorrect Authorization
GoCD is a continuous deliver server. From 18.7.0 until 26.1.0, the Get Template Config API compares HTTP method names case-sensitively when selecting authorization filters. A lower-privileged authenticated user can send a request with nonstandard HTTP method capitalization to retrieve a pipeline...
PT-2026-96132
Name of the Vulnerable Software and Affected Versions GoCD versions 12.3.1 through 26.0.x Description Legacy routes under the endpoint '/go/admin/restful/' expose the full historical server configuration to pipeline group administrators. This occurs because the system fails to restrict responses ...
GoCD: Information Disclosure via Logback Configuration Injection in GoCD Agent
Summary The GoCD Agent's logging mechanism Logback allows for property substitution and custom configuration loading. By default, the config directory might not exist in the installation path. However, if an attacker creates this directory and places a specially crafted agent-launcher-logback.xml...
EUVD-2021-12790
Malware in sbrugna...
EUVD-2024-25939
Malicious code in bioql PyPI...
EUVD-2023-32296
Malicious code in bioql PyPI...
EUVD-2024-53109
Malicious code in bioql PyPI...
EUVD-2022-41796
Malicious code in bioql PyPI...
EUVD-2024-53111
Malicious code in bioql PyPI...
EUVD-2022-41799
Malicious code in bioql PyPI...
EUVD-2022-41797
Malicious code in bioql PyPI...
EUVD-2024-53110
Malicious code in bioql PyPI...
EUVD-2022-41798
Malicious code in bioql PyPI...
EUVD-2022-33579
Malicious code in bioql PyPI...
EUVD-2022-33577
Malicious code in bioql PyPI...
EUVD-2022-38836
Malicious code in bioql PyPI...
EUVD-2021-30232
Malicious code in bioql PyPI...
EUVD-2022-29619
Malicious code in bioql PyPI...