github.com/charmbracelet/soft-serve vulnerabilities
CVEs whose affected-version data names the github.com/charmbracelet/soft-serve package (go). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
GHSA-fgxm-5hvv-x4vhMedium· 5.3charmbracelet/soft-serve HTTP responses disclose the existence and names of private repositories
charmbracelet/soft-serve HTTP responses disclose the existence and names of private repositories
▾ Sunlitcharmbracelet · github.com/charmbracelet/soft-servevia OSV
GHSA-f3fj-9625-rv3mMedium· 5.9charmbracelet/soft-serve: Race in `SetPrivate` leaves a private repository readable by unauthenticated users
charmbracelet/soft-serve: Race in `SetPrivate` leaves a private repository readable by unauthenticated users
▾ Sunlitcharmbracelet · github.com/charmbracelet/soft-servevia OSV