GO-2025-4106

vendorUSosv

Soft Serve does not sanitize ANSI escape sequences in user input in github.com/charmbracelet/soft-serve

view advisory published 2025-11-17Licence: per source

Soft Serve does not sanitize ANSI escape sequences in user input in github.com/charmbracelet/soft-serve

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2025-64494US——
Soft Serve is a self-hostable Git server for the command line. In versions prior to 0.10.0, there are several places where the user can insert data (e.g. names) and ANSI escape seq…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan