CVE-2026-55625 GoCD is vulnerable to authorization bypass via material connection test APIs

GoCD is a continuous deliver server. From 16.1.0 until 26.1.0, the internal material connection test APIs at /go/api/admin/internal/materialtest and /go/api/internal/configrepos//materialtest accept an arbitrary existing pipeline and pipeline-group context without sufficient validation. A pipelin...

MAL-2025-25998 Malicious code in material-test (npm)

The package material-test was found to contain malicious code...

Malicious code in material-test (npm)

The package material-test was found to contain malicious code...