github.com/semaphoreui/semaphore vulnerabilities (Go)

4 vulnerabilities.

• github.com/semaphoreui/semaphore Go Semaphore versions prior to 2.18.20 contain an OS command injection (argument injection)... CVE-2026-73682 Rejected 8.7 HighAugust 12, 2026
• github.com/semaphoreui/semaphore Go Semaphore U: OS Command Injection CVE-2026-73294 Fix available 9.9 CriticalAugust 12, 2026
• github.com/semaphoreui/semaphore Go Semaphore UI: Manager-to-owner privilege escalation via custom-role slug collision CVE-2026-73293 Fix available 8.8 HighAugust 12, 2026
• github.com/semaphoreui/semaphore Go Semaphore UI: CSRF vulnerability on password change endpoint - No CSRF token or password confirmation CVE-2026-73292 Public exploitFix available 8.3 HighAugust 12, 2026