CVE-2026-55870

GoCD , a continuous delivery server, prior to version 26.1.0 , can expose unmasked credentials that administrators embedded in the userinfo portion of source control material URLs through several read-only APIs accessible to regular authenticated users. The root cause is that legacy configuration...