This CVE has been withdrawn by MITRE
MITRE marked CVE-2026-73682 as REJECTED on . There is no longer a valid blast radius to assess. Any historical package or vendor data shown below is preserved for audit reference only.
Reason given by MITRE
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. CVE-2026-73294 published by GitHub
CVE-2026-73682 Blast Radius
✕ WITHDRAWN — HISTORICAL DATASemaphore versions prior to 2.18.20 contain an OS command injection (argument injection) vulnerability in the repository git_url handling that allows …