gocd vulnerabilities

CVEs per yearBy the year they were published

1. 20229
2. 20232
3. 20241
4. 20254
5. 202610

Newest CVEs

• CVE-2026-55632

  GoCD is vulnerable to authorization bypass via pipeline structure API

  gocd · gocd

  Medium4.3
• CVE-2026-52744

  GoCD is vulnerable to authorization bypass via fetch artifact autosuggestion API

  gocd · gocd

  Medium5.3
• CVE-2026-52742

  GoCD is vulnerable to historical server configuration API authorization bypass

  gocd · gocd

  Medium5.1
• CVE-2026-55870

  GoCD is vulnerable to credential exposure when admins insecurely configure material URLs

  gocd · gocd

  Low2.3
• CVE-2026-55625

  GoCD is vulnerable to authorization bypass via material connection test APIs

  gocd · gocd

  Medium4.9
• CVE-2026-52740

  GoCD is vulnerable to pipeline template view API authorization bypass

  gocd · gocd

  Medium5.3
• CVE-2026-55060

  GoCD is vulnerable to authorization bypass via support process list API

  gocd · gocd

  Low3.7
• CVE-2026-52741

  GoCD has stored XSS possible via tracking tool link highlighting on Compare Pipeline pages

  gocd · gocd

  High7.5
• CVE-2026-68919

  GoCD has stored XSS possible via forged package material comments on Stage/Job/VSM pages

  gocd · gocd

  High7.0
• CVE-2026-52743

  GoCD before 26.1.0 is vulnerable to authorization bypass via job status API

  gocd · gocd

  Medium4.3