GO-2025-3374

vendorUSosv

Soft Serve vulnerable to path traversal attacks in github.com/charmbracelet/soft-serve

view advisory published 2025-01-08Licence: per source

Soft Serve vulnerable to path traversal attacks in github.com/charmbracelet/soft-serve

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2025-22130UShigh8.8—
Soft Serve is a self-hostable Git server for the command line. Prior to 0.8.2 , a path traversal attack allows existing non-admin users to access and take over other user's reposit…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan