401 matches found
EUVD-2026-57317
Semaphore UI: Manager-to-owner privilege escalation via custom-role slug collision...
Semaphore UI: Manager-to-owner privilege escalation via custom-role slug collision
Summary Semaphore resolves a project member's effective permissions in ProjectMiddleware by looking up a role row whose slug matches the member's assigned role, and overwrites the built-in permission bitmask with that row's value. A member holding the built-in manager role creates a custom projec...
EUVD-2026-57311
Semaphore UI: CSRF vulnerability on password change endpoint - No CSRF token or password confirmation...
Semaphore UI: CSRF vulnerability on password change endpoint - No CSRF token or password confirmation
Summary The password change form is vulnerable to CSRF, allowing an attacker to change a user password even the administrator by tricking a connected user to visit a malicious website. The vulnerability has been tested with version 2.18.20. Details The password change endpoint of Semaphore UI doe...
GHSA-39J5-W47M-2GMV vulnerabilities
Vulnerabilities for packages: jitsucom-jitsu, awx, langfuse-fips, gitlab-rails-ce, opensearch-dashboards, opensearch-dashboards-fips, prism, redisinsight, librechat, lerna, nextcloud-server, wazuh-dashboard, kibana, kubeflow-centraldashboard, semaphore, gitlab-rails-ce-fips, wazuh-dashboard-fips,...
GHSA-9WX3-P993-35VP vulnerabilities
Vulnerabilities for packages: jitsucom-jitsu, azurite, prism, arangodb, redisinsight, nextcloud-server, semaphore, opensearch-dashboards-fips, wazuh-dashboard, kubeflow-centraldashboard, lerna, gitlab-rails-ce-fips, wazuh-dashboard-fips, opensearch-dashboards, awx, langfuse-fips, gitlab-rails-ce,...
CVE-2026-67319 vulnerabilities
Vulnerabilities for packages: jitsucom-jitsu, azurite, prism, arangodb, redisinsight, nextcloud-server, semaphore, opensearch-dashboards-fips, wazuh-dashboard, kubeflow-centraldashboard, lerna, gitlab-rails-ce-fips, wazuh-dashboard-fips, opensearch-dashboards, awx, langfuse-fips, gitlab-rails-ce,...
CVE-2026-67317 vulnerabilities
Vulnerabilities for packages: jitsucom-jitsu, awx, langfuse-fips, gitlab-rails-ce, opensearch-dashboards, opensearch-dashboards-fips, prism, redisinsight, librechat, lerna, nextcloud-server, wazuh-dashboard, kibana, kubeflow-centraldashboard, semaphore, gitlab-rails-ce-fips, wazuh-dashboard-fips,...
CVE-2026-73292
CVE-2026-73292 – Changement de mot de passe CSRF dans Semaphore UI À des fins éducatives et de divulgation responsable uniquement. Cette vulnérabilité a été signalée dans GHSA-8cj9-r88m-8945 et affecte les versions de semaphoreui inférieures à 2.18.21. Vulnérabilité Le point de terminaison de...
Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15
A issue was discovered in the file drivers/media/dvb-core/dvbfrontend.c within the Linux kernel version 6.2. There is a blocking operation that occurs when a task is in the !TASKRUNNING state. In the function dvbfrontendgetevent, the function waiteventinterruptible is called; the condition used i...
Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15
In the Linux kernel, the following vulnerabilities have been resolved: RDMA/hfi1: Fixed a use-after-free bug related to the mm struct. Under certain conditions, such as MPIAbort, the hfi1 cleanup code may represent the last reference held on the task’s mm. hfi1mmurbunregister then releases the la...
CVE-2026-73682
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. CVE-2026-73294 published by GitHub...
CVE-2026-73682
CVE-2026-73682 affects Semaphore prior to version 2.18.20. The vulnerability is an OS command injection via the repository handling of git_url, allowing an authenticated project Manager or Owner to trigger remote code execution on the Semaphore server host by crafting a malicious git_url with git...
CVE-2026-73682 Semaphore prior to version 2.18.20 OS Command Injection via git_url Repository Handling
Semaphore versions prior to 2.18.20 contain an OS command injection argument injection vulnerability in the repository giturl handling that allows authenticated users holding the Manager or Owner role on any project to achieve remote code execution on the Semaphore server host. Attackers can craf...
EUVD-2026-58809
Semaphore versions prior to 2.18.20 contain an OS command injection argument injection vulnerability in the repository giturl handling that allows authenticated users holding the Manager or Owner role on any project to achieve remote code execution on the Semaphore server host. Attackers can craf...
MAL-2026-14010 Malicious code in semaphore-job-pool (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 894dd3724c09345add605b1ec247a8b2780a964fe89316f23fc0e57266ac35d7 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
Malicious code in semaphore-job-pool (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 894dd3724c09345add605b1ec247a8b2780a964fe89316f23fc0e57266ac35d7 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
CVE-2026-73294
Semaphore UI is a web interface for managing DevOps tools. Prior to 2.18.17 and 2.19.5-beta2, repository giturl handling passes an attacker-controlled --upload-pack option to CmdGitClient.GetLastRemoteCommitHash through POST /api/project/id/repositories and scheduled commit-hash polling, allowing...
CVE-2026-73293
Semaphore UI is a web interface for managing DevOps tools. Prior to 2.18.19 and from 2.19.0-alpha3 until 2.19.5-beta5, ProjectMiddleware and GetProjectOrGlobalRoleBySlug allow a project manager to use POST /api/project/id/roles to create a custom manager role with permission bitmask 15, overridin...