{"api_version":"v1","generated_at":"2026-10-08T03:50:00+00:00","product":{"cve_count":4,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-semaphoreui-semaphore-8f3b212df022","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/semaphore","name":"semaphore","next_cursor":null,"observations":[{"affected":"semaphore: \u2264 2.19.12","affected_versions_present":true,"cve_id":"CVE-2026-91994","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-91994","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-09-24T14:22:33.738Z","patch_url":"","primary_source":"","published":"2026-09-15T11:35:49.385Z"},{"affected":"< 2.18.17; >= 2.19.0-alpha3, < 2.19.5-beta2","affected_versions_present":true,"cve_id":"CVE-2026-73294","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-73294","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-08-12T16:03:38.426Z","patch_url":"","primary_source":"","published":"2026-08-12T15:55:00.560Z"},{"affected":"< 2.18.19; >= 2.19.0-alpha3, < 2.19.5-beta5","affected_versions_present":true,"cve_id":"CVE-2026-73293","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-73293","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-08-12T16:56:45.324Z","patch_url":"","primary_source":"","published":"2026-08-12T15:45:22.145Z"},{"affected":"< 2.18.21","affected_versions_present":true,"cve_id":"CVE-2026-73292","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-73292","fixed":"2.18.21.","last_modified":"2026-08-12T22:11:58.204Z","patch_url":"https://github.com/semaphoreui/semaphore/security/advisories/GHSA-8cj9-r88m-8945","primary_source":"","published":"2026-08-12T15:34:45.757Z"}],"source_generated_at":"2026-10-07T06:21:30.017Z","vendor":"semaphoreui"}}