https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-03T13:42:27.022664+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-73682 fkie_cve-2026-73682 2026-10-03T13:42:27.025488+00:00

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. CVE-2026-73294 published by GitHub

 https://db.gcve.eu/vuln/ghsa-93jq-5gw9-rx3q GHSA-93jq-5gw9-rx3q 2026-10-03T13:42:27.025583+00:00

Semaphore versions prior to 2.18.20 contain an OS command injection (argument injection) vulnerability in the repository git_url handling that allows authenticated users holding the Manager or Owner role on any project to achieve remote code execution on the Semaphore server host. Attackers can craft a malicious git_url value using git's --upload-pack= option to inject and execute arbitrary shell commands when the server processes repository operations using the default cmd_git client.