VulertSecurity VulertSecurity

Vulnerability Database · Go · Package report

github.com/ansible-semaphore/semaphore: vulnerability history, versions and safety

github.com/ansible-semaphore/semaphore is a package in the Go ecosystem. Vulert records 2 vulnerabilities for it across 120 releases, from Mar 2023 to Aug 2023. Each vulnerability names the versions it affects, the fixed version to move to, and a workaround where no fix has been published.

i
2 vulnerabilities recorded C1 H1
i
1 with no fix published

No patched version yet — these are the ones to plan around.

See the unfixed vulnerabilities →
i
0 in the last 12 months

Nothing new recorded in the last year.

See the disclosure history →
i
0 malicious-package vulnerabilities

No published version shipped hostile code.

See all github.com/ansible-semaphore/semaphore vulnerabilities

Vulert verdict on github.com/ansible-semaphore/semaphore v2.5.1+incompatible i

Updated on 23 Oct 2026

Careful: one of the 2 vulnerabilities Vulert records for this package has no fix yet. Plan around that one, or apply its workaround. The rest have a fixed version to move to.

Package health score 77/100
  • Security Some issues to review
  • Maintenance Maintaining
  • Popularity Key ecosystem project
  • Community Moderate

What to do: Plan around the 1 vulnerability with no published fix: each lists the affected range and any workaround that reduces exposure. No fix yet: Vulert alerts you the moment one is published. Monitor it with Vulert →

  • Current release v2.5.1+incompatible — unaffected i
  • Vulnerabilities on record 2 over 1 year · 0 in the last year i
  • Latest disclosure 29 Aug 2023 i
  • Highest CVSS 9.8 i
  • With no published fix 1 i
  • Stars 14,278 i
  • OpenSSF scorecard 5/10 i
  • Last release 23 months ago i
  • Licence MIT i

Version list, release dates, licence and dependants published by the Go module proxy, refreshed 23 Oct 2026. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Versions

Which versions are affected

Every version Vulert tracks for github.com/ansible-semaphore/semaphore, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.

i
Version Released Vulert vulnerabilities Licence Fix published Details
v0.0.0-20241026134804-75289ba8bef4 26 Oct 2024 C1 H1 MIT No Details →
v0.0.0-20241026102151-0ddf671c656f 26 Oct 2024 C1 H1 MIT No Details →
v0.0.0-20241025162421-1f3f598f11f9 25 Oct 2024 C1 H1 MIT No Details →
v0.0.0-20241024194348-d4a27137486d 24 Oct 2024 C1 H1 MIT No Details →
v0.0.0-20241024191805-44cc5cba4f8c 24 Oct 2024 C1 H1 MIT No Details →
v0.0.0-20241024092821-aceeb459f278 24 Oct 2024 C1 H1 MIT No Details →
v0.0.0-20241023175244-00fc1a063449 23 Oct 2024 C1 H1 MIT No Details →
v0.0.0-20241022160527-7b1557175a69 22 Oct 2024 C1 H1 MIT No Details →
v0.0.0-20241022095206-959fd549ef81 22 Oct 2024 C1 H1 MIT No Details →
v0.0.0-20241022074049-74678c63b357 22 Oct 2024 C1 H1 MIT No Details →
v0.0.0-20241022055641-d21693bd204e 22 Oct 2024 C1 H1 MIT No Details →
v0.0.0-20241022042335-8c6d0e38d08b 22 Oct 2024 C1 H1 MIT No Details →
v0.0.0-20241022035615-477f76fa0249 22 Oct 2024 C1 H1 MIT No Details →
v0.0.0-20241021130735-00207bc3deef 21 Oct 2024 C1 H1 MIT No Details →
v0.0.0-20241021110312-f33944e0429f 21 Oct 2024 C1 H1 MIT No Details →
v0.0.0-20241021104309-089a10afd658 21 Oct 2024 C1 H1 MIT No Details →
v0.0.0-20241021084129-06bb156408f8 21 Oct 2024 C1 H1 MIT No Details →
v0.0.0-20241021072023-d99940fcd647 21 Oct 2024 C1 H1 MIT No Details →
v0.0.0-20241021071321-10369ba61630 21 Oct 2024 C1 H1 MIT No Details →
v0.0.0-20241021065112-054299a9f7b2 21 Oct 2024 C1 H1 MIT No Details →
v0.0.0-20241020214349-fd0f271eab43 20 Oct 2024 C1 H1 MIT No Details →
v0.0.0-20241020210651-a28cfd2908db 20 Oct 2024 C1 H1 MIT No Details →
v0.0.0-20241019201344-2a8f7cf884d3 19 Oct 2024 C1 H1 MIT No Details →
v0.0.0-20241019184955-94f7da8e4ae4 19 Oct 2024 C1 H1 MIT No Details →
v0.0.0-20241019172254-e6d9db686b50 19 Oct 2024 C1 H1 MIT No Details →
v0.0.0-20241019165525-84a1ff937498 19 Oct 2024 C1 H1 MIT No Details →
v0.0.0-20241019154817-4e6b8d07e45b 19 Oct 2024 C1 H1 MIT No Details →
v0.0.0-20241019135337-1817d6c052d6 19 Oct 2024 C1 H1 MIT No Details →
v0.0.0-20241018084456-d3b9ebec9dc9 18 Oct 2024 C1 H1 MIT No Details →
v0.0.0-20241018074945-7f4d64aa3000 18 Oct 2024 C1 H1 MIT No Details →
v0.0.0-20241016221900-9ed476410160 16 Oct 2024 C1 H1 MIT No Details →
v0.0.0-20241015094014-865d0e5e09d6 15 Oct 2024 C1 H1 MIT No Details →
v0.0.0-20241015073223-4016c8580379 15 Oct 2024 C1 H1 MIT No Details →
v0.0.0-20241015065911-2f7c25b24597 15 Oct 2024 C1 H1 MIT No Details →
v0.0.0-20241014214925-cf584776a48f 14 Oct 2024 C1 H1 MIT No Details →
v0.0.0-20241014210724-fd782bc1cb01 14 Oct 2024 C1 H1 MIT No Details →
v0.0.0-20241014185715-54296bd4bff4 14 Oct 2024 C1 H1 MIT No Details →
v0.0.0-20241013214739-d73c8f2edbad 13 Oct 2024 C1 H1 MIT No Details →
v0.0.0-20241013175913-fe68a495df2a 13 Oct 2024 C1 H1 MIT No Details →
v0.0.0-20241013164601-e879faee0f77 13 Oct 2024 C1 H1 MIT No Details →
v0.0.0-20241013155056-494f989c1948 13 Oct 2024 C1 H1 MIT No Details →
v0.0.0-20241013143809-648e31b85d40 13 Oct 2024 C1 H1 MIT No Details →
v0.0.0-20241013131054-fd6a258f04fb 13 Oct 2024 C1 H1 MIT No Details →
v0.0.0-20241013123631-2bd3d864b432 13 Oct 2024 C1 H1 MIT No Details →
v0.0.0-20241013121725-e69ee199600c 13 Oct 2024 C1 H1 MIT No Details →
v0.0.0-20241013092622-151106ac3f10 13 Oct 2024 C1 H1 MIT No Details →
v0.0.0-20241012230408-2efef31213e8 12 Oct 2024 C1 H1 MIT No Details →
v0.0.0-20241012201616-c9705d2df3b4 12 Oct 2024 C1 H1 MIT No Details →
v0.0.0-20241011211917-da91959cc3eb 11 Oct 2024 C1 H1 MIT No Details →
v0.0.0-20241011194750-14db3c8d7cb8 11 Oct 2024 C1 H1 MIT No Details →
v0.0.0-20241011165409-fc8264636b03 11 Oct 2024 C1 H1 MIT No Details →
v0.0.0-20241011161102-3875bc5677af 11 Oct 2024 C1 H1 MIT No Details →
v0.0.0-20241011141739-6050609f8461 11 Oct 2024 C1 H1 MIT No Details →
v0.0.0-20241011132728-64b1c30e8514 11 Oct 2024 C1 H1 MIT No Details →
v0.0.0-20241011125149-2ae911986255 11 Oct 2024 C1 H1 MIT No Details →
v0.0.0-20241008193823-385ad7d00730 08 Oct 2024 C1 H1 MIT No Details →
v0.0.0-20241008180046-35e80f74b58f 08 Oct 2024 C1 H1 MIT No Details →
v0.0.0-20241008173738-899f2d9fbefb 08 Oct 2024 C1 H1 MIT No Details →
v0.0.0-20241008134347-de1e9216fb7d 08 Oct 2024 C1 H1 MIT No Details →
v0.0.0-20241008094251-d83eceee2bba 08 Oct 2024 C1 H1 MIT No Details →
v0.0.0-20241007212943-1c52b81a3bac 07 Oct 2024 C1 H1 MIT No Details →
v0.0.0-20241007204804-9b86c64e2eb2 07 Oct 2024 C1 H1 MIT No Details →
v0.0.0-20241007194217-f606f1a66ee8 07 Oct 2024 C1 H1 MIT No Details →
v0.0.0-20241007175351-618018dd9e07 07 Oct 2024 C1 H1 MIT No Details →
v0.0.0-20241007124916-ccc6fa250237 07 Oct 2024 C1 H1 MIT No Details →
v0.0.0-20241007120830-c7aa45516d43 07 Oct 2024 C1 H1 MIT No Details →
v0.0.0-20241005091029-4f94a26945eb 05 Oct 2024 C1 H1 MIT No Details →
v0.0.0-20241005081340-8629a211f9ed 05 Oct 2024 C1 H1 MIT No Details →
v0.0.0-20241004074706-7372d8ee8a47 04 Oct 2024 C1 H1 MIT No Details →
v0.0.0-20240930063011-8492e531637b 30 Sep 2024 C1 H1 MIT No Details →
v0.0.0-20240929212455-26643a284197 29 Sep 2024 C1 H1 MIT No Details →
v0.0.0-20240929202958-8dd85afa150e 29 Sep 2024 C1 H1 MIT No Details →
v0.0.0-20240929201808-4afe568db67e 29 Sep 2024 C1 H1 MIT No Details →
v0.0.0-20240929195821-c7b352dba3d4 29 Sep 2024 C1 H1 MIT No Details →
v0.0.0-20240929193405-08a059a93974 29 Sep 2024 C1 H1 MIT No Details →
v0.0.0-20240929185333-bea1c6045f98 29 Sep 2024 C1 H1 MIT No Details →
v0.0.0-20240929153804-1ca883f20cb2 29 Sep 2024 C1 H1 MIT No Details →
v0.0.0-20240928113039-8f25e35b89bd 28 Sep 2024 C1 H1 MIT No Details →
v0.0.0-20240928110321-c7177fac63c2 28 Sep 2024 C1 H1 MIT No Details →
v0.0.0-20240928043615-970d476fcd09 28 Sep 2024 C1 H1 MIT No Details →
v0.0.0-20240928023633-66cd8af26fc2 28 Sep 2024 C1 H1 MIT No Details →
v0.0.0-20240927231658-7b1a91237978 27 Sep 2024 C1 H1 MIT No Details →
v0.0.0-20240927222013-50b86174e97d 27 Sep 2024 C1 H1 MIT No Details →
v0.0.0-20240927194225-ae3f87827688 27 Sep 2024 C1 H1 MIT No Details →
v0.0.0-20240926204448-3056640b41a4 26 Sep 2024 C1 H1 MIT No Details →
v0.0.0-20240926183936-a63b40905009 26 Sep 2024 C1 H1 MIT No Details →
v0.0.0-20240924155851-ba778ababec3 24 Sep 2024 C1 H1 MIT No Details →
v0.0.0-20240924151113-eb067eb1ea29 24 Sep 2024 C1 H1 MIT No Details →
v0.0.0-20240913123426-f5404b17b086 13 Sep 2024 C1 H1 MIT No Details →
v0.0.0-20240822040018-53f125a45c67 22 Aug 2024 C1 H1 MIT No Details →
v0.0.0-20240821112932-71a7ebe19ea4 21 Aug 2024 C1 H1 MIT No Details →
v0.0.0-20240819074709-c285829582c3 19 Aug 2024 C1 H1 MIT No Details →
v0.0.0-20240810162233-cde8515fb13c 10 Aug 2024 C1 H1 MIT No Details →
v0.0.0-20240810070827-9efa97d75685 10 Aug 2024 C1 H1 MIT No Details →
v0.0.0-20240729092743-550c2a54315c 29 Jul 2024 C1 H1 MIT No Details →
v0.0.0-20240726153127-a354d54bfd5e 26 Jul 2024 C1 H1 MIT No Details →
v0.0.0-20240723201113-a5ea39e229b2 23 Jul 2024 C1 H1 MIT No Details →
v0.0.0-20240722121928-74863501dd92 22 Jul 2024 C1 H1 MIT No Details →
v0.0.0-20240722121745-e44910d4a15d 22 Jul 2024 C1 H1 MIT No Details →
v0.0.0-20240722115129-de0eda9fb94b 22 Jul 2024 C1 H1 MIT No Details →
v0.0.0-20240722103307-83b8aad3e224 22 Jul 2024 C1 H1 — No Details →
v0.0.0-20240721190031-24bc4a83b8f1 21 Jul 2024 C1 H1 — No Details →
v0.0.0-20240720104314-21ba6c6b6404 20 Jul 2024 C1 H1 — No Details →
v0.0.0-20240720070808-7ea8d8956db9 20 Jul 2024 C1 H1 — No Details →
v0.0.0-20240719213013-c7185d33ed46 19 Jul 2024 C1 H1 — No Details →
v0.0.0-20240719100415-63204b27b586 19 Jul 2024 C1 H1 — No Details →
v0.0.0-20240717194111-fef54a1d5fab 17 Jul 2024 C1 H1 — No Details →
v0.0.0-20240717182929-734cc91ac810 17 Jul 2024 C1 H1 — No Details →
v0.0.0-20240717174648-4a022ab38690 17 Jul 2024 C1 H1 — No Details →
v0.0.0-20240717165631-428e14890270 17 Jul 2024 C1 H1 — No Details →
v0.0.0-20240717152912-8bea0fc2c190 17 Jul 2024 C1 H1 — No Details →
v0.0.0-20240717145820-90b55c09a953 17 Jul 2024 C1 H1 — No Details →
v0.0.0-20240717122459-17b524e22ebf 17 Jul 2024 C1 H1 — No Details →
v0.0.0-20240716063536-bb748cb48051 16 Jul 2024 C1 H1 — No Details →
v0.0.0-20240715091348-faa71a09136f 15 Jul 2024 C1 H1 — No Details →
v0.0.0-20240715085712-3b3b29ee88a5 15 Jul 2024 C1 H1 — No Details →
v0.0.0-20240715075228-5168717683d6 15 Jul 2024 C1 H1 — No Details →
v0.0.0-20240715062435-82d8d60fadb1 15 Jul 2024 C1 H1 — No Details →
v0.0.0-20240714175817-a4992c5e9d55 14 Jul 2024 C1 H1 — No Details →
v0.0.0-20240714171457-aab76094e4cf 14 Jul 2024 C1 H1 — No Details →

The newest 120 of 601 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.

02 Disclosure history

How often vulnerabilities are recorded

  • 2023 2

Counted by the year Vulert recorded each vulnerability — the same date the table below shows as disclosed. 0 of the 2 were recorded in the last 12 months.

03 Vulnerabilities

Recorded vulnerabilities for github.com/ansible-semaphore/semaphore

The 2 most severe of 2 vulnerabilities recorded for this package

Search all 2 in the database →
Vulnerability Severity Fixed version ↓ Disclosed ↓
CVE-2023-28609: Ansible Semaphore mishandles authentication 9.8 critical 2.8.89 18 Mar 2023
CVE-2023-39059: Code Injection in ansible semaphore 8.8 high No fix published 29 Aug 2023

Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback

Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About github.com/ansible-semaphore/semaphore

Is github.com/ansible-semaphore/semaphore safe to use?

Vulert records 2 vulnerabilities for github.com/ansible-semaphore/semaphore in Go: 1 critical, 1 high, 0 medium and 0 low. 1 of them has no published fix yet, so that is the one to avoid or mitigate.

What is github.com/ansible-semaphore/semaphore's Vulert package health score?

Vulert scores github.com/ansible-semaphore/semaphore 77/100, which reads as in good shape. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15).

How many vulnerabilities does github.com/ansible-semaphore/semaphore have?

2 vulnerabilities are recorded for github.com/ansible-semaphore/semaphore in the Go ecosystem: 1 critical, 1 high, 0 medium and 0 low. The ledger on this page lists the same counts next to the date of the most recent disclosure.

How often are new github.com/ansible-semaphore/semaphore vulnerabilities disclosed?

0 vulnerabilities were recorded for github.com/ansible-semaphore/semaphore in the last 12 months, and the oldest entry in this database dates to 18 Mar 2023. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.

Which versions of github.com/ansible-semaphore/semaphore are affected?

Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.

How do I monitor github.com/ansible-semaphore/semaphore for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the github.com/ansible-semaphore/semaphore version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.