VDB
Sign up
CRITICAL9.8

GHSA-pmhg-cmjc-3875

Ansible Semaphore mishandles authentication

Quick fix

GHSA-pmhg-cmjc-3875 — github.com/ansible-semaphore/semaphore: upgrade to the fixed version with the command below.

go get github.com/ansible-semaphore/semaphore@v2.8.89

Details

api/auth.go in Ansible Semaphore before 2.8.89 mishandles authentication.

Are you affected?

Enter the version of the package you're using.

Affected packages

Go/github.com/ansible-semaphore/semaphore
Introduced in: 0Fixed in: 2.8.89
Fixgo get github.com/ansible-semaphore/semaphore@v2.8.89

References