CVE-2026-52744
- Source
- https://cve.org/CVERecord?id=CVE-2026-52744
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-52744.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2026-52744
- Aliases
-
- GHSA-mvpm-hmc9-2q8p
- Published
- 2026-09-23T17:58:52Z
- Modified
- 2026-10-02T08:14:50Z
- Severity
-
- 5.3 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N CVSS Calculator
- Summary
- GoCD is vulnerable to authorization bypass via fetch artifact autosuggestion API
- Details
-
GoCD is a continuous deliver server. From 20.2.0 until 26.1.0, the internal GoCD UI fetch-artifact auto-suggestion API at /go/api/internal/pipelines/**/upstream does not adequately authorize access to upstream dependency data. An authenticated user can retrieve inter-pipeline dependency hierarchy details and user-defined pipeline, stage, job, and artifact plugin reference names that the user cannot otherwise view in the UI. The endpoint is read-only and does not permit modification of pipeline data. This issue is fixed in version 26.1.0.
- Database specific
{ "cna_assigner": "GitHub_M", "cwe_ids": [ "CWE-862" ], "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/52xxx/CVE-2026-52744.json" }- References
-
- https://github.com/gocd/gocd/releases/tag/26.1.0
- https://www.gocd.org/releases/#26-1-0
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/52xxx/CVE-2026-52744.json
- https://github.com/gocd/gocd/security/advisories/GHSA-mvpm-hmc9-2q8p
- https://nvd.nist.gov/vuln/detail/CVE-2026-52744
- https://github.com/gocd/gocd/commit/ce9602d7bb27dcb89bf8fc15eb859306cdc8995c
Affected packages
Git / github.com/gocd/gocd
Affected versions
20.*
20.10.0
20.2.0
20.3.0
20.4.0
20.5.0
20.6.0
20.7.0
20.8.0
20.9.0
21.*
21.1.0
21.2.0
21.3.0
21.4.0
22.*
22.1.0
22.2.0
22.3.0
23.*
23.1.0
23.2.0
23.3.0
23.4.0
23.5.0
24.*
24.1.0
24.2.0
24.3.0
24.4.0
24.5.0
25.*
25.1.0
25.2.0
25.3.0
25.4.0
Database specific
source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-52744.json"
vanir_signatures
[
{
"deprecated": false,
"digest": {
"function_hash": "140523527857145202275109240752277857582",
"length": 153
},
"id": "CVE-2026-52744-0050ff5c",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/gocd/gocd/commit/ce9602d7bb27dcb89bf8fc15eb859306cdc8995c",
"target": {
"file": "api/api-internal-dependency-pipelines-v1/src/main/java/com/thoughtworks/go/apiv1/internaldependencypipelines/InternalDependencyPipelinesControllerV1.java",
"function": "InternalDependencyPipelinesControllerV1"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "169109770081484673694443710874171558403",
"length": 2586
},
"id": "CVE-2026-52744-078739d2",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/gocd/gocd/commit/ce9602d7bb27dcb89bf8fc15eb859306cdc8995c",
"target": {
"file": "server/src/test/java/com/thoughtworks/go/server/presentation/FetchArtifactViewHelperTest.java",
"function": "shouldSuggest_AncestorFetch_validForFetchArtifactCall_fromAncestorUpstream_withMultiplePathsToSameDestination"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "166977434127069601641928193458847943678",
"length": 196
},
"id": "CVE-2026-52744-09d0b44b",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/gocd/gocd/commit/ce9602d7bb27dcb89bf8fc15eb859306cdc8995c",
"target": {
"file": "domain/src/main/java/com/thoughtworks/go/config/materials/dependency/DependencyMaterial.java",
"function": "isUsedInFetchArtifact"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "297213093617712625232489052114569129226",
"length": 756
},
"id": "CVE-2026-52744-0a1252f8",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/gocd/gocd/commit/ce9602d7bb27dcb89bf8fc15eb859306cdc8995c",
"target": {
"file": "server/src/test/java/com/thoughtworks/go/server/presentation/FetchArtifactViewHelperTest.java",
"function": "shouldProvideNoAutoSuggestionWhenThereIsOnlyOneTemplateAndAPipelineIsUsingThatTemplate"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "92291469593820373077411150092372157374",
"length": 548
},
"id": "CVE-2026-52744-0a985fe2",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/gocd/gocd/commit/ce9602d7bb27dcb89bf8fc15eb859306cdc8995c",
"target": {
"file": "domain/src/test/java/com/thoughtworks/go/config/materials/dependency/DependencyMaterialTest.java",
"function": "shouldDetectDependencyMaterialUsedInFetchArtifact"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "101595719244602473180559637482488648004",
"length": 1766
},
"id": "CVE-2026-52744-177417fe",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/gocd/gocd/commit/ce9602d7bb27dcb89bf8fc15eb859306cdc8995c",
"target": {
"file": "server/src/test/java/com/thoughtworks/go/server/presentation/FetchArtifactViewHelperTest.java",
"function": "shouldSuggest_AncestorFetch_validForFetchArtifactCall_fromAncestorUpstream"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"293644107583814706305313834881514248581",
"43526100860380261015420273856821442599",
"157233936825244187698220557484897351053"
],
"threshold": 0.9
},
"id": "CVE-2026-52744-1edf0217",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/gocd/gocd/commit/55b7b460510bb739c1ae6d226ff7fb650596dca2",
"target": {
"file": "server/src/test/java/com/thoughtworks/go/server/service/ConsoleServiceTest.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "250852653100473697060643010861647717523",
"length": 161
},
"id": "CVE-2026-52744-21d1e300",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/gocd/gocd/commit/ce9602d7bb27dcb89bf8fc15eb859306cdc8995c",
"target": {
"file": "base/src/test/java/com/thoughtworks/go/util/SystemEnvironmentTest.java",
"function": "shouldDisableTemplateAutoSuggest"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "250222003766494194465964995240362262739",
"length": 800
},
"id": "CVE-2026-52744-27d5397f",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/gocd/gocd/commit/55b7b460510bb739c1ae6d226ff7fb650596dca2",
"target": {
"file": "server/src/test/java/com/thoughtworks/go/server/service/ConsoleServiceTest.java",
"function": "shouldReturnUsefulErrorIfMoveConsoleArtifactsFails"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"16184027175901594012572608112787750720",
"66349799201786316849723606491548502101",
"75337131478644781023056292465792105378",
"237764699876278858427693302780237353163"
],
"threshold": 0.9
},
"id": "CVE-2026-52744-2c61c569",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/gocd/gocd/commit/ce9602d7bb27dcb89bf8fc15eb859306cdc8995c",
"target": {
"file": "config/config-server/src/test/java/com/thoughtworks/go/config/MagicalGoConfigXmlLoaderTest.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "69098306808455624916447433360337824655",
"length": 414
},
"id": "CVE-2026-52744-2df20047",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/gocd/gocd/commit/ce9602d7bb27dcb89bf8fc15eb859306cdc8995c",
"target": {
"file": "server/src/test/java/com/thoughtworks/go/server/presentation/FetchArtifactViewHelperTest.java",
"function": "shouldNotSuggestForTemplatesIfToggleIsTurnedOff"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "222596185981448013521075324238327204373",
"length": 89
},
"id": "CVE-2026-52744-31652ecf",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/gocd/gocd/commit/ce9602d7bb27dcb89bf8fc15eb859306cdc8995c",
"target": {
"file": "base/src/main/java/com/thoughtworks/go/util/SystemEnvironment.java",
"function": "isProductionMode"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "129517380214322102309431735094950807193",
"length": 337
},
"id": "CVE-2026-52744-35a16844",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/gocd/gocd/commit/ce9602d7bb27dcb89bf8fc15eb859306cdc8995c",
"target": {
"file": "server/src/main/java/com/thoughtworks/go/server/presentation/FetchArtifactViewHelper.java",
"function": "autosuggestMap"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"170690002085554598142316648939479647999",
"219038982082077218097536844214975024635",
"285430657390892803989720412009124772901",
"17628242881194734807422306618228821702",
"43479681603455464025394406352121760888",
"185136178006395089750986658045616404056",
"50601224019735648630463195454515407060",
"333616349181426289381264541120212135136",
"75407180318704451699303769443305508093",
"299330647006141152362241576238343070464",
"339312279681718685281684627776773464493",
"234736427492421011595008195861011662766"
],
"threshold": 0.9
},
"id": "CVE-2026-52744-367d69e8",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/gocd/gocd/commit/ce9602d7bb27dcb89bf8fc15eb859306cdc8995c",
"target": {
"file": "config/config-api/src/main/java/com/thoughtworks/go/config/AbstractFetchTask.java"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"92317768784855972083714902940610668852",
"25242715180403607015399479541498975539",
"199355860403287564248726788398160412646",
"208298482557345145651501387185259526959",
"154402629711520503827519666743464975269",
"141569625105105355784122355308971570302",
"184154335636089949306773987204247362106",
"267603679027768359768602562023879877298",
"214310490629570349315112598492719004477",
"93619572387675470812320082158602677020",
"263646582784983138338835206748843826213",
"158490366291517212698398282792768343907",
"9012781686423457846970909978693096192",
"156553043090525497639152697627760616817",
"59652632847049817147337048617308821404",
"209690778797699436852167494539295349479",
"141569625105105355784122355308971570302",
"14058973752796256572778907694226704701",
"214379576656821945338246774610751009516",
"3180966746493670287389605449443019713",
"245481936431005087017867671994764442227",
"13452041052358115996302130704294653502",
"286687594342028746670054220464040665054",
"20111064273537123319781536259787536769"
],
"threshold": 0.9
},
"id": "CVE-2026-52744-38036631",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/gocd/gocd/commit/ce9602d7bb27dcb89bf8fc15eb859306cdc8995c",
"target": {
"file": "domain/src/test/java/com/thoughtworks/go/config/materials/dependency/DependencyMaterialTest.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "328763488477951516277873305490948854715",
"length": 3509
},
"id": "CVE-2026-52744-3a460849",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/gocd/gocd/commit/ce9602d7bb27dcb89bf8fc15eb859306cdc8995c",
"target": {
"file": "server/src/test/java/com/thoughtworks/go/server/presentation/FetchArtifactViewHelperTest.java",
"function": "setUp"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "98699506846435547481604790368372731559",
"length": 471
},
"id": "CVE-2026-52744-3c9f5de0",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/gocd/gocd/commit/ce9602d7bb27dcb89bf8fc15eb859306cdc8995c",
"target": {
"file": "server/src/main/java/com/thoughtworks/go/server/presentation/FetchArtifactViewHelper.java",
"function": "createPipelineConfigForTemplate"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "260364395385109169068184353794201694040",
"length": 1128
},
"id": "CVE-2026-52744-4645a137",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/gocd/gocd/commit/ce9602d7bb27dcb89bf8fc15eb859306cdc8995c",
"target": {
"file": "server/src/test/java/com/thoughtworks/go/server/presentation/FetchArtifactViewHelperTest.java",
"function": "shouldSuggest_AncestorFetch_validForFetchArtifactCall_fromDirectUpstream"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "254269762987755857858273189156563806415",
"length": 1135
},
"id": "CVE-2026-52744-5dbc0620",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/gocd/gocd/commit/ce9602d7bb27dcb89bf8fc15eb859306cdc8995c",
"target": {
"file": "server/src/test/java/com/thoughtworks/go/server/presentation/FetchArtifactViewHelperTest.java",
"function": "shouldProvideAutoSuggestionForTemplateOfPipelinesWhichAreNotUsingThatTemplate"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "235386143272803682565035311759925418122",
"length": 475
},
"id": "CVE-2026-52744-60ad1adc",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/gocd/gocd/commit/ce9602d7bb27dcb89bf8fc15eb859306cdc8995c",
"target": {
"file": "server/src/main/java/com/thoughtworks/go/server/presentation/FetchArtifactViewHelper.java",
"function": "populateFetchableJobHierarchyFor"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"85916729486008108765227712458215363993",
"18569802857866935761202166538277947994",
"118130289122334534612850948445469764491",
"194773563829029624651144669375453777335",
"78750293255275402827971568825013197251",
"21764180933101857966019273748517008913",
"263589968909065315574312561142233511338",
"302479932376498833396191087898372555753",
"225249313631543041086135343422355465005",
"176967765970441571326771918091157593594",
"84570546085839851789042071052351631792",
"249595595394676701920347507527647706406"
],
"threshold": 0.9
},
"id": "CVE-2026-52744-6640d93d",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/gocd/gocd/commit/ce9602d7bb27dcb89bf8fc15eb859306cdc8995c",
"target": {
"file": "spark/spark-base/src/main/java/com/thoughtworks/go/spark/spring/AbstractAuthenticationHelper.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "206753989312984392801488012856481349449",
"length": 655
},
"id": "CVE-2026-52744-6b1c40ec",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/gocd/gocd/commit/ce9602d7bb27dcb89bf8fc15eb859306cdc8995c",
"target": {
"file": "server/src/main/java/com/thoughtworks/go/server/presentation/FetchArtifactViewHelper.java",
"function": "addStagesToHierarchy"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "38571139180517101849116674427748589221",
"length": 220
},
"id": "CVE-2026-52744-6dd415da",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/gocd/gocd/commit/ce9602d7bb27dcb89bf8fc15eb859306cdc8995c",
"target": {
"file": "config/config-api/src/main/java/com/thoughtworks/go/config/PipelineConfig.java",
"function": "allStagesBefore"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "276849226725221505050513190310608889350",
"length": 125
},
"id": "CVE-2026-52744-6ffbd5ab",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/gocd/gocd/commit/ce9602d7bb27dcb89bf8fc15eb859306cdc8995c",
"target": {
"file": "server/src/main/java/com/thoughtworks/go/server/presentation/FetchArtifactViewHelper.java",
"function": "JobHierarchyQueueEntry"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"138007398561296813224468266021543730557",
"139823800403067598003398745890108112977",
"108940706564065242778166100647699255819",
"153876844032389522781279966462380334614",
"335712810106953252587649944527328684577",
"200190028301941325865184761901951509841",
"256035028623174236544155333888666294782",
"66239506392448446163199643802105469803",
"82741951745325990108109972341397036572",
"124001052933411435139486347119750902653",
"38718043798505971904532399796407679518",
"111285834166707433191835795010515581305",
"41826062471802755638951298906544092452",
"171230987944228498664745589309124713825",
"321843571841108104625351664225051996612",
"63451663407919739700286184897079836241",
"184282252372875757684077958289553993357",
"161231922525277568706043772043126089640",
"57058537483487247266814919142099075273",
"217291757453036296048052251056633971659",
"288168122992725446068318185058627315546",
"75253517930724300596577540973158756002",
"210520557572752695818156101717638083308",
"84245241761958522531401039672529164029",
"82626379378588468792998487364959621799",
"192715406741379336367772175772961244655",
"292772242891039897666587574523989669035",
"277220618623102558667266747386071657040",
"37788525252523629170998014014446308275",
"84796956887459143780338793831312645748",
"21987825178495554832314603895436656466",
"270705051387272750287082613083767543434",
"82192034720279561813474283156515094110",
"7312685442732654050129296792920493253",
"245263927583066601094023115224747976271",
"231720834865581603047199135826026210312",
"84327939046417582082790949903564966552",
"25172777986663462845907834136232785726",
"216201676683055716417009469967694173577",
"234110929977740570467962698082383887935",
"54568758252240696100950121148663099740",
"123783117951513946782888515178537266011",
"101469271053922008405751665201694195336",
"202301855799668218235900356030976909896",
"47991342012212746058273691808081825824",
"310718548580651951514754992576916565597",
"292583334857663958951123352589006240710",
"28814909849773680334411119099163984822",
"133534436782183934683797160011761556890",
"336144586515333609947406690680392919913",
"288717402691786417277029908689912956714",
"322812740789486845384826710503010117778",
"93024225341340418506672601155104073096",
"123727034099129745635549910990286967391",
"54701038560350579926289159270981540600",
"120729075939893686635834615430278605765",
"262153655655936451753351537017772279799",
"136882747684152451013859753227516208100",
"114582436043240033405565821087602164141",
"224152435194105857337587653620889483325",
"239798055679265832130527276108190724311",
"239668153398793357405098479827537315681",
"12072197394346878983871181589251495387",
"162547603076465364804474561296839918059",
"78294527906952353478605678112375155554",
"20518271703122125414171931197154322462",
"169583312483851101730299295914501456640",
"80795871096249720415366118373836881159",
"48082849446831960062250895391806933143",
"85669520663017441319639349302871090824",
"327199254831640699643448663741225153021",
"102533201874118077444769064877312122708",
"105044219025594659662240176530662158773",
"337202042101294478452822898210893287165",
"212890721674355247961814739435475860342",
"70203455195631937552245362008198831693",
"277158582729699019034520713420423963851",
"169163300349170619427088676183710260257",
"51021606762047921802539529208142816261",
"284689146618566721482604769391059035247",
"215729397349974722458420450677632930791",
"198696416636900125415618698138082567056",
"71878481898427346796403663098551692222",
"59467348650828092184681988050883563839",
"96833454988853474810996943009350728645",
"305692275833355401908847804534010321216",
"330754571011426648187484660511826850387",
"178845334027593986735728487740990243282",
"100123550510052135900187064828975023124",
"122563592383228250527331327827720518686",
"290794010031455174185980440673739362444",
"41696690285784788720446769040713791572",
"16848793586623934568781847231221131091",
"87124400940724296676662914196530663613",
"232384407474847601180329712822062718951",
"263221825227187252555381832331967330217",
"198696416636900125415618698138082567056",
"71878481898427346796403663098551692222",
"59467348650828092184681988050883563839",
"88126245458097042765177779807465337293",
"281517932948446318103007006583961148401",
"338127333460505226499245734412142045340",
"104785227020417449129728790379807834740",
"17414984888340627303899116176106643984",
"327982677061328641937656499261807547527",
"105091552480239171752391707437406496268",
"53272229921902586146897559479747450992",
"333198486434696391410296714175157456065",
"9566919199227170157157181421796254549",
"37261122901755899145635219582652003203",
"130240742114911746158183752011656309344",
"64358633816997050101874246572357441607",
"101789238461796636299370820842287091456",
"62271636172743109581244179985013544534",
"340028343276955840751243663167780600434",
"178181069536656597618985236628840326425",
"224094340180431900232708233305043710868",
"178955287042528769549401928418782503427",
"59467348650828092184681988050883563839",
"182945018401476049609939582633228010803",
"201678197084463171046921419408520089271",
"268407585182067892251995641348456273424",
"267710532449214207573725967595241952077",
"17414984888340627303899116176106643984",
"42390424102472929388120415644726892444",
"85863892967735069968988746213103264733",
"34963235676576909578923381172749712269",
"291177237356749262826604460505487546605",
"62698971085006332572272717413878766257",
"201058373125514116848463263173674173102",
"302236408707366332611731974632123189664",
"289505901043456720257568952985943314775",
"54025089919477021480150011959119088511",
"182545188389479881855678580451473422260",
"317853102291791562329623080619797173632",
"314823988995111392117178106179085196282",
"251439232309501737125584938595059324735",
"222442996978634833578471766271806325162",
"20618133861402370617186747257357999690",
"257513290308155145989974514736324579166",
"227268699450600340854192818641071596107",
"121258492278438313061362706434016913261",
"251796304963662315441525172832103341476",
"26362308099262711160977069437248840347",
"197607047073180273780687853357241437512",
"60626730021182766530764264592670033907",
"224094340180431900232708233305043710868",
"178955287042528769549401928418782503427",
"59467348650828092184681988050883563839",
"11707826523326261539637213609068971556",
"130982261817269012023379344711837283101",
"226278936828608116727828833123143104809",
"285684046523581933683787342212941393965",
"59467348650828092184681988050883563839",
"88126245458097042765177779807465337293",
"281517932948446318103007006583961148401",
"338127333460505226499245734412142045340",
"104785227020417449129728790379807834740",
"17414984888340627303899116176106643984",
"156599732091847225628373837796462245487",
"39438239600657155960156051395752326217",
"182007558097644831804535889585427539003",
"267710532449214207573725967595241952077",
"17414984888340627303899116176106643984",
"42390424102472929388120415644726892444",
"85863892967735069968988746213103264733",
"34963235676576909578923381172749712269",
"291177237356749262826604460505487546605",
"62698971085006332572272717413878766257",
"216600229796467792484092387621144310127",
"330466916312646860109648066113966246933",
"131424248777201620229272127103513391351",
"330955665235550671453792426403449802316",
"72749966350239499247216076463342514265",
"185890619850319749013116869128341963717",
"161384690337000425736897444105741727334",
"90589457748038340956339885318993215491",
"335021965792538108522116744668724370897",
"191124417315042257649171755010063114251",
"222612703911152974788917689073041669328",
"107347597246234308725095117225277191587",
"37399880636160354575192105067116873527",
"314750768540599447958534214748346363195",
"290640278424586590080518440029256570662",
"307092101899642305150695669010551701751",
"12491498771944802763162989585986407934",
"4163996017859743996957660636812014905",
"278904302007341561166927118008300999407",
"112288772473473509816014971435727756121",
"155560520024098454794377900709675678882",
"178669150277112311540930437058783082806",
"150646419521164963403466040593905608137",
"176501587416294540898893324251973168919",
"200657232016970213249609767546466059300",
"322738304561419846484398368711880773976",
"47304310033859213944710485045454599146",
"283635808018620972819905195532865212079",
"176501587416294540898893324251973168919",
"76331370254020363229782837633480369889",
"34938574726403290430069253949355264303",
"86355083354666967958003467029656499599",
"32687889969205214682098300090834791824",
"176501587416294540898893324251973168919",
"222631867245859889680590756762073845437",
"253060129509922099625568184871316944804",
"196278410584197414693306729211650418012",
"69317230491295099845723109564872709412",
"176501587416294540898893324251973168919",
"74474372791715142379331074943253035608",
"334200745270928251489230692741440707618",
"142188336187130402885399234577699242625",
"52602924731572889847146132348462425365",
"176501587416294540898893324251973168919",
"230999165062625924640194318783084187579",
"221362457005706990161789399813987024426",
"53928074219548985487775001007483970371",
"337366979354422018341666221401801586410",
"243230250918568374077699778191335768097",
"212371145918821993721874151426051313656",
"13183949799656717741171572126310040861",
"301356233245627448777140624936370093299",
"115772845261726488709976068995887714479",
"327619560041493693672135664856493131698",
"101315534850961338419536086292319152985",
"134460796453209029184123828176143292549",
"295028679144819201501858649557228121481",
"320991724772738330865281823349029578194",
"65379667375797675742483816071335247527",
"43587739029825955292108501107250438224",
"134460796453209029184123828176143292549",
"303277309476792106587222928104880793846",
"236259808032616965166695009230234667615",
"8366942397554025863492364583551236359",
"20270109681795822729212797446340002559",
"134460796453209029184123828176143292549",
"123601954330982153819496192385786477614",
"15294067292892663526804178663655571167",
"144157050869877455718702374168817740611",
"135356177089468600178340959687205715109",
"134460796453209029184123828176143292549",
"98043641121264077122698000935934456510",
"250119284636381508109798021446152040703",
"188415410899290688042636814040257232065",
"180784776721222630619989963881360907524",
"174588334976676118705334196298680347485",
"282752507547062544327038091369787068073",
"102245808970983666192007004724141467943",
"325357382591944279148635884809832494040",
"244550936370843589104263899086563658979",
"2718985380859248839181174861070784592",
"166165662027382497829531426339149848837",
"201732575609784576077609631763338724961",
"298135039017279385446098753109090725157",
"338286041584029263650124756980159732116",
"241107624239696969163987916257241986849",
"154658658165619838102278831372994414011",
"201732575609784576077609631763338724961",
"223550978167552715850578244754114130628",
"275676520526821524673429928038714871057",
"178639244229380179816162013257801963262",
"270891908015319886990792467424068071790",
"227716719705721964316090294793205052863",
"297214223008629877151927964752130112035",
"221539759557686873439224603266443739983",
"233753538332308915111749472017679814501",
"222780193973633515959368337342767119835",
"158552290636429278883980906957059884102",
"236316126540145887855347137498787365066",
"152038382873592504333005621320772454812",
"30672628900947722702262196545174150460",
"152202800429839993172038385142574111057",
"285075476936519236494476723785698416195",
"214952735152035864737116496621489535531",
"175469898293507859493817061919015043865",
"84950524426072514837542768852203931147",
"88300943888492420149920970994728249325",
"186371002696603103670642941077377258371",
"95714005061285981800512121340726093184",
"79901333352076157725067329328466758657",
"120455974211299329753524215680633380353",
"218699985158505150570135931794315897419",
"7215750487564173320265168835631250944",
"46750349092850061945332874721002691740",
"300528024172069150241993751147804582539",
"110288393728799680251654145479447717985",
"323384577565287998331275241477704911188",
"122204858025389141379137487248377824379",
"329578081252139650533359739894457142492",
"148138496775042651081058629862576100227",
"237247548136703038103176231929486704397",
"49566634219129207840997365281456151898",
"175353375982229611994726126347967530203",
"275248190242558364962207809859232771282",
"17551192183780396116977409866701609865",
"320230542953447671595889934739243087017",
"118814805921794328537453379565602179077",
"129928106422770420238064917115506408744",
"10849631971195074699035792810535935321",
"56616828078569672635185173170656005618",
"247150835694071399932137399141315535972",
"213356546676205280371166574456377963732",
"53373878463760377259500514854746683770",
"317029076037022669669379070466639576857",
"66303316211158943845621245760883136950",
"187241166696531545673200562476637781041",
"312962116791933061861002873916424751961",
"297958359557482704844706485422490036888",
"201099379540832406058417421089964729763",
"215590812752574478198396599146280009",
"46220288480501642170188694917072113843",
"84692331414209913302306742075559581789",
"172977634339753870000640688891968806530",
"228173039660256225923810179077466053420",
"20810485317619696145022795866468148624",
"56616828078569672635185173170656005618",
"247150835694071399932137399141315535972",
"213356546676205280371166574456377963732",
"812805162124763251976840970062439093",
"274964806168130815335373761391453764912",
"289660028196650300601938950047162656139",
"212185337671430384766256392512883184064",
"145479575104404826154073619505246526940",
"176384419761759940739649103739474760535",
"283789762430985034763285534959831599277",
"70164958775441106376192294035847410863",
"188169415875165723562279135872390287023",
"152754513831919121712720029470086189022"
],
"threshold": 0.9
},
"id": "CVE-2026-52744-776d7cc6",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/gocd/gocd/commit/ce9602d7bb27dcb89bf8fc15eb859306cdc8995c",
"target": {
"file": "server/src/test/java/com/thoughtworks/go/server/presentation/FetchArtifactViewHelperTest.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "77428618442319983249999359880944319324",
"length": 6847
},
"id": "CVE-2026-52744-77d1891b",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/gocd/gocd/commit/ce9602d7bb27dcb89bf8fc15eb859306cdc8995c",
"target": {
"file": "server/src/test/java/com/thoughtworks/go/server/presentation/FetchArtifactViewHelperTest.java",
"function": "shouldSuggest_AllPathsInEntireConfigDependencyGraph_fromAnyStageToAnyUpstreamStage"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"227011962210693248583088906051691884962",
"221141770771030260025341120582905597444",
"292467660939338994131692958648056414061",
"124333553340485724968709373342016295946",
"246567544793296459330497882098292870701",
"190243148572115335478658820363717980648",
"183250791122016985204152643361849413242",
"160308337198697320625493784296161554263",
"204489415374500268519965753786380650345",
"54580926905292144671282588444786337232",
"233407871286135886645907713353276745731",
"149378172357473305998662511195912705031",
"54761479474805996041278993845035449548",
"311246268425917805811801039423124575926",
"102860486077313260508121960847646280360",
"338130462154072325349309564237472268946",
"133607457711331352887407984189151468436",
"81110985713399055574313334340616455247",
"24966561957943249916232991734655426638",
"72061959243351894064197470606994724968",
"217918361408498416251412390949540086716",
"31664983980804493722762415258755514723",
"252129863485861195540753722341218088050",
"17485485447449369775492748478385025475",
"11874486856882115153222818968566694214",
"31408838263396426076445309954822384684",
"194696638070861097831474579797099813096",
"167183359350533615423490155141649018744",
"37394382256579700604673977598975194781"
],
"threshold": 0.9
},
"id": "CVE-2026-52744-7bfa35ae",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/gocd/gocd/commit/ce9602d7bb27dcb89bf8fc15eb859306cdc8995c",
"target": {
"file": "api/api-internal-dependency-pipelines-v1/src/main/java/com/thoughtworks/go/apiv1/internaldependencypipelines/InternalDependencyPipelinesControllerV1.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "292546815896282946395775206545492091145",
"length": 86
},
"id": "CVE-2026-52744-7c05d4fb",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/gocd/gocd/commit/ce9602d7bb27dcb89bf8fc15eb859306cdc8995c",
"target": {
"file": "base/src/main/java/com/thoughtworks/go/util/SystemEnvironment.java",
"function": "isFetchArtifactTemplateAutoSuggestEnabled"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"88581659698205484132970271654436424331",
"281865308778127707829286527201317973266",
"234892189000774723661317676642271298414",
"301924675426008045025974118523143585359",
"39541325592482449771883887612368913081",
"192858894199378779103866867840171848908",
"101479890672713428314363193841794379955",
"282946345768611801756495309108908913865",
"116863505440472650106945710579442534984",
"256319495477342491117171178080612805424",
"151217358049452596245560442135879625664",
"184335060853554817840984647747181070606",
"181581511978067709502581958056964038645",
"300327258863474888648650918914919515806",
"166731960595514460664981542371626809896",
"78358379427341446130395769597861370504",
"189195757541769562105689420596395281703",
"120379196926735227135556805355152361427",
"237016518328368571828596359470987606057",
"307516595977258871988080206120072551358",
"165064020442733789069585472965813542440",
"137662118680241679409014907244181689003",
"140458464945879065224475676957398881292",
"154448319583386773512785502909476347670",
"114834075537509906322852893380691944129",
"328049111752173522008377829117089946516",
"181433315775769683933475052271540282999",
"155174571010527407954275900426748988229",
"147858091006485754255299498520536820411",
"159461783417415432295362354934199170977",
"2026522302136699899889486279374672563",
"213192574187176798691435602296287313837",
"9422526044322329217671590784188986896",
"276814922577677934200932751045962304966",
"158657008731645333985181498949830958935",
"12873965402442018740556254186685141272",
"35612660915140838697275741069525402480",
"123025817679603153254908484747716717370",
"125131439669822136322262910884628241471",
"101655533732395730940760485836092069601",
"71762951331934999523929957501206954402",
"316781784731747620747832467948770720113",
"110326443238413117586726181404429507173",
"252168535519933443952608890030589103150",
"281491471913854697983061424592273920151",
"81941586686634177390670960603872042457",
"15556599904311988339777192609986701405",
"256154466501195639519198451239956320302",
"88274891049067722497748865691882517338",
"207431604816245044877223788135307717638",
"52108527239127569248708208676143403160",
"23358970733900523136176206742468442293",
"175110760910087780656747230425922755813",
"272124636512316847907845657228339172472",
"165349901022118453960594614357961906573",
"146634085491800450455452273628377041271",
"9697988370752381887817737508546618666",
"58222483215855019814795932852025441673",
"28587957724744921662406730213841986543",
"69370250065739264737166143896736541650",
"162917993425325850299961816474759742432",
"310664484891202579329143382669202596776",
"91865333887921755422076527996759672240",
"206620100853588787329312647562517271647",
"305852381571104915622376743872567646879",
"160039139279061098134414644815244771312",
"292984749210256242353622781573982426527",
"263426627105058559053955822698007514083",
"117899421976134384054212295301835512427",
"271624968150509860263307881448122175905",
"103914474329593782886953489915457165663",
"141807258852166241071178517151319724481",
"122098624186270610389864041659470964946",
"333197776107784056212414015008449981464",
"249231059188729683025278215732800096186",
"125961388363722430788054946216281354399",
"78171387714516923920655053622074903775",
"173388253142979292236087433099178980771",
"44384058581294792362343021068251428136",
"199901149340907908986072407535996615642",
"23191114840894441878704384605036045703",
"69589893148277679475677795107592650586",
"98653441770636922736645095040094161327",
"326863298531733600501204728673025800541",
"196605678312187524815429699666046427476",
"57954858946478759190980661218414699559",
"91426661434076649292692222195658335276",
"128290783309083944956143391388324585937",
"316318672225256999040437561451401520255",
"333477741067502408250163787063500925703",
"47538643391331887171537033429063712478"
],
"threshold": 0.9
},
"id": "CVE-2026-52744-7f8e1a68",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/gocd/gocd/commit/ce9602d7bb27dcb89bf8fc15eb859306cdc8995c",
"target": {
"file": "server/src/main/java/com/thoughtworks/go/server/presentation/FetchArtifactViewHelper.java"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"28693781088980181496302275514030697898",
"10678459294889044909772225212627488200",
"175173184480685397820126155925220344522",
"329006988183540707648767761898289579072",
"11992742862501065308055682018679482957",
"72414432231703362207931254694384223238",
"51971825196533491337595429079694148346",
"214557260687196586806907775894811280901",
"125301255125331015527515367485747705558",
"130103820946314567136416980600704634754",
"175543842870839153102450074597860631345",
"336173700610607747390305287646610362817",
"1298547859687378696628909400797118866"
],
"threshold": 0.9
},
"id": "CVE-2026-52744-84c8b022",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/gocd/gocd/commit/ce9602d7bb27dcb89bf8fc15eb859306cdc8995c",
"target": {
"file": "base/src/test/java/com/thoughtworks/go/util/SystemEnvironmentTest.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "191322352190342313720784513946920030333",
"length": 394
},
"id": "CVE-2026-52744-94c723ea",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/gocd/gocd/commit/ce9602d7bb27dcb89bf8fc15eb859306cdc8995c",
"target": {
"file": "config/config-api/src/main/java/com/thoughtworks/go/config/PipelineConfig.java",
"function": "validStagesForFetchArtifact"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "48738957831258736445544785315325990890",
"length": 420
},
"id": "CVE-2026-52744-9c84e893",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/gocd/gocd/commit/ce9602d7bb27dcb89bf8fc15eb859306cdc8995c",
"target": {
"file": "api/api-internal-dependency-pipelines-v1/src/main/java/com/thoughtworks/go/apiv1/internaldependencypipelines/InternalDependencyPipelinesControllerV1.java",
"function": "setupRoutes"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "140511835818464953451468850486366871566",
"length": 226
},
"id": "CVE-2026-52744-a1d6f083",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/gocd/gocd/commit/ce9602d7bb27dcb89bf8fc15eb859306cdc8995c",
"target": {
"file": "server/src/main/java/com/thoughtworks/go/server/presentation/FetchArtifactViewHelper.java",
"function": "fetchArtifactSuggestionsForPipeline"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"102764018274370312262572168064950975138",
"221377190757690040471569413460072849938",
"263315842409871638824571450308288004876",
"24877111940166263153530250656880032921"
],
"threshold": 0.9
},
"id": "CVE-2026-52744-ab1a82f4",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/gocd/gocd/commit/ce9602d7bb27dcb89bf8fc15eb859306cdc8995c",
"target": {
"file": "config/config-api/src/test/java/com/thoughtworks/go/config/PipelineConfigTest.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "198055425017124777724160229879939041542",
"length": 339
},
"id": "CVE-2026-52744-ab79cce7",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/gocd/gocd/commit/ce9602d7bb27dcb89bf8fc15eb859306cdc8995c",
"target": {
"file": "server/src/test/java/com/thoughtworks/go/server/presentation/FetchArtifactViewHelperTest.java",
"function": "shouldNotSuggestIfTurnedOff"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "65054959097190048752912793145989952363",
"length": 1211
},
"id": "CVE-2026-52744-b1037de1",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/gocd/gocd/commit/ce9602d7bb27dcb89bf8fc15eb859306cdc8995c",
"target": {
"file": "config/config-api/src/main/java/com/thoughtworks/go/config/AbstractFetchTask.java",
"function": "validatePathFromAncestor"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"141349947218308468894536671592125629007",
"223286155038637104491493323850080996474",
"110076144916243415997904684921815387265",
"187362222315284155238661270867585028673",
"170740809047273817532257570911476385886",
"78352449119628788133450758795993293767",
"6676728717727965155102747306102438512",
"308434701615777390133151491575651833186",
"44299653721446682001128554108884035363",
"177036166452901150998027690397051780124",
"322417208403914890697788699501770758449",
"123823956957591694049511894845902288826",
"138522831835519807130755752731425569094",
"307003144002780374845669546381559994486",
"101226633692836515944082173268189598252",
"41931754860783189299520527857273038809",
"33896657475008939504838290612341129438"
],
"threshold": 0.9
},
"id": "CVE-2026-52744-b2f1d3d3",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/gocd/gocd/commit/ce9602d7bb27dcb89bf8fc15eb859306cdc8995c",
"target": {
"file": "base/src/main/java/com/thoughtworks/go/util/SystemEnvironment.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "45580389487792123391928387574276818657",
"length": 653
},
"id": "CVE-2026-52744-b5362835",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/gocd/gocd/commit/ce9602d7bb27dcb89bf8fc15eb859306cdc8995c",
"target": {
"file": "config/config-api/src/test/java/com/thoughtworks/go/config/PipelineConfigTest.java",
"function": "shouldGetAllFetchTasks"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"88743128178451330938306386940525275686",
"242551199782388110686099703215204558209",
"229278456444421289625743959578296323764",
"45643966397599003557816082399627551454",
"267225203323519855961897561514708766398",
"3270931364140407815802461011649393999",
"338883787019229152820499207316865381032",
"127603925813827774575889224818032903549",
"65961350431724489961759833136011291736",
"241657147291569919469169947171064808345",
"83329081655108130244580734303629829830",
"245994620638006314470333911762212283501",
"193911291748079711124072623008790570851",
"67956166135506611754050329077911531217",
"205713215517040243263045594471250554935",
"80338993582005737230988724134015444724",
"259410912100880642254446282665297143756",
"321529383946508931223117729215131676631",
"291549931038355297326607379727190599154",
"300172523493867211187222061903678976702",
"217297666488741477450190169590735647708",
"112188275983869963031385318993471463788",
"107791335453581344950594201075232169666",
"172289494062957276197383598213377947529",
"227389303307963769014109138500050001755",
"280309971474838184402595790491453951323",
"204940874902583105907823352830387884819",
"223685524771762243385639914403075338669",
"38640485168047257777492351167554962246",
"233463071051913404811991808228170875881",
"224116466227453802596519275279805091723",
"230809322058314144642830694138832776162",
"26656279788472803861120542207063210295",
"227214736588194638970783278871674693753",
"152571489820093743494541313986698662362",
"280829117216017569848978661286102438744",
"191698926203464767777124882448852015117",
"107426030234383507298619534157560488011",
"115513874998840600621883754957387651195",
"310364464411502380549378556453838170039",
"47550877940580418966917663150737309919",
"29045767319259434881456444674922595120",
"108587633537507210242609878158511307392",
"284256373545440261289093641400034939215",
"132534468440026388821697489820377432043",
"1718654914741469365626580637320697644",
"27066932693007605077623696155221694570"
],
"threshold": 0.9
},
"id": "CVE-2026-52744-bfb31d7d",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/gocd/gocd/commit/ce9602d7bb27dcb89bf8fc15eb859306cdc8995c",
"target": {
"file": "config/config-api/src/main/java/com/thoughtworks/go/config/PipelineConfig.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "139245361666522132293437290382568216559",
"length": 232
},
"id": "CVE-2026-52744-c0dd78bc",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/gocd/gocd/commit/ce9602d7bb27dcb89bf8fc15eb859306cdc8995c",
"target": {
"file": "base/src/test/java/com/thoughtworks/go/util/SystemEnvironmentTest.java",
"function": "shouldEnableTemplateAutoSuggestByDefault"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "163583160812482063613800895450551773264",
"length": 260
},
"id": "CVE-2026-52744-c1322ec6",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/gocd/gocd/commit/ce9602d7bb27dcb89bf8fc15eb859306cdc8995c",
"target": {
"file": "config/config-api/src/main/java/com/thoughtworks/go/config/PipelineConfig.java",
"function": "getFetchTasks"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "97544571161862012048967204348972846440",
"length": 427
},
"id": "CVE-2026-52744-c33a8976",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/gocd/gocd/commit/ce9602d7bb27dcb89bf8fc15eb859306cdc8995c",
"target": {
"file": "api/api-internal-dependency-pipelines-v1/src/main/java/com/thoughtworks/go/apiv1/internaldependencypipelines/InternalDependencyPipelinesControllerV1.java",
"function": "index"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "35437601145417247786744316811398806509",
"length": 274
},
"id": "CVE-2026-52744-d1d16624",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/gocd/gocd/commit/ce9602d7bb27dcb89bf8fc15eb859306cdc8995c",
"target": {
"file": "server/src/main/java/com/thoughtworks/go/server/presentation/FetchArtifactViewHelper.java",
"function": "addLocalUpstreamStages"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "268002106600576268682656140707229093331",
"length": 486
},
"id": "CVE-2026-52744-db5b5534",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/gocd/gocd/commit/ce9602d7bb27dcb89bf8fc15eb859306cdc8995c",
"target": {
"file": "domain/src/test/java/com/thoughtworks/go/config/materials/dependency/DependencyMaterialTest.java",
"function": "shouldDetectDependencyMaterialUsedInFetchArtifactFromAncestor"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "10953982196836667030276772223465054128",
"length": 537
},
"id": "CVE-2026-52744-e5e79273",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/gocd/gocd/commit/ce9602d7bb27dcb89bf8fc15eb859306cdc8995c",
"target": {
"file": "domain/src/test/java/com/thoughtworks/go/config/materials/dependency/DependencyMaterialTest.java",
"function": "shouldDetectDependencyMaterialNotUsedInFetchArtifact"
}
},
{
"deprecated": false,
"digest": {
"line_hashes": [
"270322056639668781948043396668437795983",
"3032828079366898819225088609514875129",
"185495867033486122234140579234735238915",
"337645867716726204988242494942041641782",
"150568622844415353281116972782213296263",
"57151368678261342101772849002204329394",
"21405685679170307248349453985418285015",
"32598604082678347007459173378105040774",
"250776351408552011085622724308249835177",
"102773042227712380051185624212894701760",
"193945555105656936453847297800470789796",
"314799369627835642921827884396392181379",
"230976902974930511412344752311416916168"
],
"threshold": 0.9
},
"id": "CVE-2026-52744-e9577f71",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/gocd/gocd/commit/ce9602d7bb27dcb89bf8fc15eb859306cdc8995c",
"target": {
"file": "domain/src/main/java/com/thoughtworks/go/config/materials/dependency/DependencyMaterial.java"
}
},
{
"deprecated": false,
"digest": {
"function_hash": "125720553185829107684427970953097821209",
"length": 868
},
"id": "CVE-2026-52744-eb69460d",
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/gocd/gocd/commit/ce9602d7bb27dcb89bf8fc15eb859306cdc8995c",
"target": {
"file": "server/src/test/java/com/thoughtworks/go/server/presentation/FetchArtifactViewHelperTest.java",
"function": "shouldSuggest_AncestorFetch_validForFetchArtifactCall_fromLocalPipeline"
}
}
]
vanir_signatures_modified
"2026-10-02T08:14:50Z"