https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 13:42:27 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-73682 <p>Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. CVE-2026-73294 published by GitHub</p> <p>Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. CVE-2026-73294 published by GitHub</p> https://db.gcve.eu/vuln/fkie_cve-2026-73682 https://db.gcve.eu/vuln/ghsa-93jq-5gw9-rx3q <p>Semaphore versions prior to 2.18.20 contain an OS command injection (argument injection) vulnerability in the repository git_url handling that allows authenticated users holding the Manager or Owner role on any project to achieve remote code execution on the Semaphore server host. Attackers can craft a malicious git_url value using git&#39;s --upload-pack= option to inject and execute arbitrary shell commands when the server processes repository operations using the default cmd_git client.</p> <p>Semaphore versions prior to 2.18.20 contain an OS command injection (argument injection) vulnerability in the repository git_url handling that allows authenticated users holding the Manager or Owner role on any project to achieve remote code execution on the Semaphore server host. Attackers can craft a malicious git_url value using git&#39;s --upload-pack= option to inject and execute arbitrary shell commands when the server processes repository operations using the default cmd_git client.</p> https://db.gcve.eu/vuln/ghsa-93jq-5gw9-rx3q