406 matches found
CVE-2026-73292
CVE-2026-73292 – CSRF Password Change in Semaphore UI For educational and responsible disclosure purposes only. This vulnerability has been reported in GHSA-8cj9-r88m-8945 and affect semaphoreui versions below 2.18.21. Vulnerability The password change endpoint of Semaphore UI does not implement...
EUVD-2026-57320
Semaphore U: OS Command Injection...
GHSA-XP7J-H7JC-4W8P Semaphore U: OS Command Injection
Summary An OS command injection in repository giturl handling lets any user holding the Manager or Owner role on any project the normal project-collaborator roles achieve remote code execution on the Semaphore server host. Using git's --upload-pack= option, an attacker runs arbitrary commands. Th...
EUVD-2026-57317
Semaphore UI: Manager-to-owner privilege escalation via custom-role slug collision...
GHSA-CXVF-GVFQ-36W2 Semaphore UI: Manager-to-owner privilege escalation via custom-role slug collision
Summary Semaphore resolves a project member's effective permissions in ProjectMiddleware by looking up a role row whose slug matches the member's assigned role, and overwrites the built-in permission bitmask with that row's value. A member holding the built-in manager role creates a custom projec...
Semaphore UI: Manager-to-owner privilege escalation via custom-role slug collision
Summary Semaphore resolves a project member's effective permissions in ProjectMiddleware by looking up a role row whose slug matches the member's assigned role, and overwrites the built-in permission bitmask with that row's value. A member holding the built-in manager role creates a custom projec...
GHSA-8CJ9-R88M-8945 Semaphore UI: CSRF vulnerability on password change endpoint - No CSRF token or password confirmation
Summary The password change form is vulnerable to CSRF, allowing an attacker to change a user password even the administrator by tricking a connected user to visit a malicious website. The vulnerability has been tested with version 2.18.20. Details The password change endpoint of Semaphore UI doe...
EUVD-2026-57311
Semaphore UI: CSRF vulnerability on password change endpoint - No CSRF token or password confirmation...
Semaphore UI: CSRF vulnerability on password change endpoint - No CSRF token or password confirmation
Summary The password change form is vulnerable to CSRF, allowing an attacker to change a user password even the administrator by tricking a connected user to visit a malicious website. The vulnerability has been tested with version 2.18.20. Details The password change endpoint of Semaphore UI doe...
GHSA-39J5-W47M-2GMV vulnerabilities
Vulnerabilities for packages: nextcloud-server, prism, lerna, semaphore, wazuh-dashboard-fips, langfuse, opensearch-dashboards, kibana, langfuse-fips, gitlab-rails-ce, gitlab-rails-ce-fips, wazuh-dashboard, opensearch-dashboards-fips, awx, librechat, redisinsight, jitsucom-jitsu,...
GHSA-9WX3-P993-35VP vulnerabilities
Vulnerabilities for packages: nextcloud-server, lerna, semaphore, gitlab-rails-ce, wazuh-dashboard, awx, azurite, prism, arangodb, wazuh-dashboard-fips, langfuse, langfuse-fips, librechat, redisinsight, jitsucom-jitsu, kibana, kubeflow-centraldashboard, gitlab-rails-ce-fips,...
CVE-2026-67319 vulnerabilities
Vulnerabilities for packages: nextcloud-server, lerna, semaphore, gitlab-rails-ce, wazuh-dashboard, awx, azurite, prism, arangodb, wazuh-dashboard-fips, langfuse, langfuse-fips, librechat, redisinsight, jitsucom-jitsu, kibana, kubeflow-centraldashboard, gitlab-rails-ce-fips,...
CVE-2026-67317 vulnerabilities
Vulnerabilities for packages: nextcloud-server, prism, lerna, semaphore, wazuh-dashboard-fips, langfuse, opensearch-dashboards, kibana, langfuse-fips, gitlab-rails-ce, gitlab-rails-ce-fips, wazuh-dashboard, opensearch-dashboards-fips, awx, librechat, redisinsight, jitsucom-jitsu,...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries: Fixed dtlaccesslock to use a rwsemaphore. The dtlaccesslock needs to be a rwsemaphore, a sleeping lock, because the code calls kmalloc while holding it, which can cause a sleep condition. bash echo 1...
Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15
A issue was discovered in the file drivers/media/dvb-core/dvbfrontend.c within the Linux kernel version 6.2. There is a blocking operation that occurs when a task is in the !TASKRUNNING state. In the function dvbfrontendgetevent, the function waiteventinterruptible is called; the condition used i...
Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15
In the Linux kernel, the following vulnerabilities have been resolved: RDMA/hfi1: Fixed a use-after-free bug related to the mm struct. Under certain conditions, such as MPIAbort, the hfi1 cleanup code may represent the last reference held on the task’s mm. hfi1mmurbunregister then releases the la...
CVE-2026-73682
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. CVE-2026-73294 published by GitHub...
CVE-2026-73682
CVE-2026-73682 affects Semaphore prior to version 2.18.20. The vulnerability is an OS command injection via the repository handling of git_url, allowing an authenticated project Manager or Owner to trigger remote code execution on the Semaphore server host by crafting a malicious git_url with git...
CVE-2026-73682 Semaphore prior to version 2.18.20 OS Command Injection via git_url Repository Handling
Semaphore versions prior to 2.18.20 contain an OS command injection argument injection vulnerability in the repository giturl handling that allows authenticated users holding the Manager or Owner role on any project to achieve remote code execution on the Semaphore server host. Attackers can craf...
