Vulnerabilities fixed in Semaphore 5.10.3
- Last Updated: May 13, 2026
- 1 minute read
- Semaphore
- Documentation
The following table lists the vulnerabilities resolved in Semaphore 5.10.3. You can filter the table by vulnerability or component. Note that some vulnerabilities have multiple IDs.
| Vulnerability ID | Component |
|---|---|
| BDSA-2025-62789 | Netty 4.1.128 |
| BDSA-2025-68245 | Apache Log4j 2.17.1 |
| BDSA-2025-87749/CVE-2025-15284 | QS Querystring |
| BDSA-2026-0299/CVE-2025-68470 | reacttraining/react-router |
| BDSA-2026-0303/CVE-2026-22029 | @remix-run/router 1.23.1 |
| BDSA-2026-0611 | jsdiff |
| BDSA-2026-1220 | OpenSSL 3.0.18 |
| CVE-2024-29371 | jose4j 0.9.4 |
| CVE-2025-66560 | Quarkus-REST |
| CVE-2025-67735 | Netty 4.1.128 |
| CVE-2025-68161 | log4j-core |
| CVE-2026-1002 | eclipse-vertx/vert.x 4.4.9, 4.5.22 |
| GHSA-qr3p-2xj2-q7hq/CVE-2026-22022 | solr-core |
| GHSA-vc2w-4v3p-2mqw/CVE-2026-22444 | solr-core |
| GHSA-vc5p-v9hr-52mj | log4j-core |