Semaphoreui

4 CVEs across 1 Semaphoreui products. Browse Semaphoreui vulnerabilities, severities, and proof-of-concept exploits.

Semaphoreui products with known CVEs

ProductCVEs
Semaphore5
Semaphoreui CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-91994Medium6.52026-09-15Semaphore UI through 2.19.12 exempts GET and HEAD requests from project resource permission checks in GetMustCanMiddleware. Attackers with guest or task_runner…
CVE-2026-73294Critical9.92026-08-12Semaphore UI is a web interface for managing DevOps tools. Prior to 2.18.17 and 2.19.5-beta2, repository git_url handling passes an attacker-controlled --uploa…
CVE-2026-73293High8.82026-08-12Semaphore UI is a web interface for managing DevOps tools. Prior to 2.18.19 and from 2.19.0-alpha3 until 2.19.5-beta5, ProjectMiddleware and GetProjectOrGloba…
CVE-2026-73292High8.32026-08-12Semaphore UI is a web interface for managing DevOps tools. Prior to 2.18.21, the /api/users/{id}/password endpoint accepts a cross-site request using the authe…