GO-2025-3930

vendorUSosv

Soft Serve vulnerable to arbitrary file writing through SSH API in github.com/charmbracelet/soft-serve

view advisory published 2025-09-08Licence: per source

Soft Serve vulnerable to arbitrary file writing through SSH API in github.com/charmbracelet/soft-serve

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2025-58355US——
Soft Serve is a self-hostable Git server for the command line. In versions 0.9.1 and below, attackers can create or override arbitrary files with uncontrolled data through its SSH…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan