Threats tagged 'ghsa-8gg4-hx7q-h82p'

CVE-2025-55278 is a vulnerability in the API authentication middleware of HCL DevOps Loop where authentication tokens are accepted without proper validation of expiration and cryptographic signature. This flaw allows attackers to use expired or tampered tokens to gain unauthorized access and perform privileged actions.