Advisories for Golang/Github.com/Ansible-Semaphore/Semaphore package

An issue in ansible semaphore v.2.8.90 allows a remote attacker to execute arbitrary code via a crafted payload to the extra variables parameter.

api/auth.go in Ansible Semaphore before 2.8.89 mishandles authentication.