CVE-2026-52742

GoCD is a continuous deliver server. From 12.3.1 until 26.1.0, legacy routes under /go/admin/restful/ expose historical full server configuration to pipeline group administrators instead of restricting responses to configuration for groups they administer. The disclosed configuration can include...

EUVD-2026-83954

GoCD is a continuous deliver server. From 12.3.1 until 26.1.0, legacy routes under /go/admin/restful/ expose historical full server configuration to pipeline group administrators instead of restricting responses to configuration for groups they administer. The disclosed configuration can include...

CVE-2026-52742

GoCD (continuous delivery server) versions 12.3.1 through 26.1.0 are affected by an authorization bypass in legacy routes under /go/admin/restful/*. These routes expose the full historical server configuration to pipeline group administrators rather than restricting responses to only the groups t...

CVE-2026-52742 GoCD is vulnerable to historical server configuration API authorization bypass

GoCD is a continuous deliver server. From 12.3.1 until 26.1.0, legacy routes under /go/admin/restful/ expose historical full server configuration to pipeline group administrators instead of restricting responses to configuration for groups they administer. The disclosed configuration can include...

CVE-2026-52742 GoCD is vulnerable to historical server configuration API authorization bypass

GoCD is a continuous deliver server. From 12.3.1 until 26.1.0, legacy routes under /go/admin/restful/ expose historical full server configuration to pipeline group administrators instead of restricting responses to configuration for groups they administer. The disclosed configuration can include...

PT-2026-96132

Name of the Vulnerable Software and Affected Versions GoCD versions 12.3.1 through 26.0.x Description Legacy routes under the endpoint '/go/admin/restful/' expose the full historical server configuration to pipeline group administrators. This occurs because the system fails to restrict responses ...

CVE-2026-51946

A SQL Injection vulnerability exists in GoAdminGroup GoAdmin (last release v1.2.26 ). A remote attacker can exploit the ‘__sort_type“ URL parameter on all /admin/info/{table} endpoints to execute arbitrary code and obtain sensitive information. Exploitation details are not provided in the documen...

PT-2026-54789

SQL Injection vulnerability in GoAdminGroup GoAdmin last release v1.2.26 allows a remote attacker to execute arbitrary code and obtain sensitive information via the the sort type URL parameter on all /admin/info/table endpoints...

CVE-2022-42980

go-admin aka GO Admin 2.0.12 uses the string go-admin as a production JWT key...

EUVD-2022-46029

Malicious code in bioql PyPI...

CVE-2022-42980

go-admin aka GO Admin 2.0.12 uses the string go-admin as a production JWT key...

Path traversal

go-admin aka GO Admin 2.0.12 uses the string go-admin as a production JWT key...

CVE-2022-42980

go-admin aka GO Admin 2.0.12 uses the string go-admin as a production JWT key...

CVE-2022-42980: Use of Hard-coded Credentials

go-admin aka GO Admin 2.0.12 uses the string go-admin as a production JWT key...

CVE-2022-42980

go-admin aka GO Admin 2.0.12 uses the string go-admin as a production JWT key...

CVE-2022-42980

go-admin aka GO Admin 2.0.12 uses the string go-admin as a production JWT key...

go-admin 信任管理问题漏洞

go-admin is go-admin-team open source based on Gin + Vue + Element UI front-end and back-end separation of permissions management system . A security vulnerability exists in go-admin also known as GO Admin version 2.0.12, which originated from its use of the string "go-admin" as the production...

CVE-2022-42980

CVE-2022-42980 affects go-admin (GO Admin) 2.0.12 where the production JWT key is the literal string "go-admin". This hardcoded value can enable token forgery and unauthorized access corresponding to the high-impact CVSS rating. The available connected sources confirm the exact vulnerability—use ...

CVE-2022-42980

go-admin aka GO Admin 2.0.12 uses the string go-admin as a production JWT key...

PT-2022-26691 · Goadmin · Go-Admin

Name of the Vulnerable Software and Affected Versions: go-admin aka GO Admin version 2.0.12 Description: The issue concerns the use of a hardcoded string 'go-admin' as a production JWT key in go-admin. Recommendations: For go-admin version 2.0.12, update the JWT key to a secure, randomly generate...