semaphoreui/semaphore Security Advisories | GitStock

critical2026-09-08

Semaphore U: OS Command Injection

GHSA-xp7j-h7jc-4w8p · CVE-2026-73294

high2026-09-03

Semaphore UI: Manager-to-owner privilege escalation via custom-role slug collision

GHSA-cxvf-gvfq-36w2 · CVE-2026-73293

high2026-09-03

Semaphore UI: CSRF vulnerability on password change endpoint - No CSRF token or password confirmation

GHSA-8cj9-r88m-8945 · CVE-2026-73292