Skip to content
OpenAdvisories

Vendor

semaphoreui

5 known vulnerabilities.

Products

semaphore 4 Semaphore UI 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2026-91994

    Semaphore UI through 2.19.12 Missing Authorization on GET and HEAD Requests

    Semaphore UI through 2.19.12 exempts GET and HEAD requests from project resource permission checks in GetMustCanMiddleware. Attackers with guest or task_runner roles can read all project environments including plaintext secrets, credentials, and passwords via…

    semaphoreui semaphore