CVE-2026-68919: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

GoCD is a continuous deliver server. From 13.3.0 until 26.1.0, GoCD does not correctly encode and escape malicious material modification comments that mimic the special trackback format used by package materials when rendering the Stage Detail, Job/Build Detail, Value Stream Map, and Pipeline...

PT-2026-96136

Name of the Vulnerable Software and Affected Versions GoCD versions 13.3.0 through 26.0.x Description GoCD fails to correctly encode and escape malicious material modification comments that mimic the special trackback format used by package materials. This occurs when rendering the Stage Detail,...