Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 21:35:25 +0000 EUVD-2026-233518 https://cve.radiocsirt.org/vuln/euvd-2026-233518 EUVD-2026-233518 https://cve.radiocsirt.org/vuln/euvd-2026-233518 fkie_cve-2022-39308 https://cve.radiocsirt.org/vuln/fkie_cve-2022-39308 <p>GoCD is a continuous delivery server. GoCD helps you automate and streamline the build-test-release cycle for continuous delivery of your product. GoCD versions from 19.2.0 to 19.10.0 (inclusive) are subject to a timing attack in validation of access tokens due to use of regular string comparison for validation of the token rather than a constant time algorithm. This could allow a brute force attack on GoCD server API calls to observe timing differences in validations in order to guess an access token generated by a user for API access. This issue is fixed in GoCD version 19.11.0. As a workaround, users can apply rate limiting or insert random delays to API calls made to GoCD Server via a reverse proxy or other fronting web server. Another workaround, users may disallow use of access tokens by users by having an administrator revoke all access tokens through the &#34;Access Token Management&#34; admin function.</p> <p>GoCD is a continuous delivery server. GoCD helps you automate and streamline the build-test-release cycle for continuous delivery of your product. GoCD versions from 19.2.0 to 19.10.0 (inclusive) are subject to a timing attack in validation of access tokens due to use of regular string comparison for validation of the token rather than a constant time algorithm. This could allow a brute force attack on GoCD server API calls to observe timing differences in validations in order to guess an access token generated by a user for API access. This issue is fixed in GoCD version 19.11.0. As a workaround, users can apply rate limiting or insert random delays to API calls made to GoCD Server via a reverse proxy or other fronting web server. Another workaround, users may disallow use of access tokens by users by having an administrator revoke all access tokens through the &#34;Access Token Management&#34; admin function.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-39308 gsd-2022-39308 https://cve.radiocsirt.org/vuln/gsd-2022-39308 gsd-2022-39308 https://cve.radiocsirt.org/vuln/gsd-2022-39308