Browse CVEs

CRITICAL 9.6 CVE-2026-41589 Wish is an SSH server with defaults and a collection of middlewares. From version 2.0.0 to before version 2.0.1, the SCP middleware in charm.land/wis… Wish No fix yet Fix from $2,3002026-05-07 MEDIUM 6.5 CVE-2026-33353 Soft Serve is a self-hostable Git server for the command line. From version 0.6.0 to before version 0.11.6, an authorization flaw in repo import allo… Soft Serve 0.11.6+ Fix from $1,6002026-03-24 CRITICAL 9.1 CVE-2026-30832 Soft Serve is a self-hostable Git server for the command line. From version 0.6.0 to before version 0.11.4, an authenticated SSH user can force the s… Soft Serve 0.11.4+ Fix from $2,3002026-03-07 CRITICAL 9.8 CVE-2026-24058 Soft Serve is a self-hostable Git server for the command line. Versions 0.11.2 and below have a critical authentication bypass vulnerability that all… Soft Serve 0.11.3+ Fix from $2,3002026-01-22 MEDIUM 5.4 CVE-2026-22253 Soft Serve is a self-hostable Git server for the command line. Prior to version 0.11.2, an authorization bypass in the LFS lock deletion endpoint all… Soft Serve 0.11.2+ Fix from $1,6002026-01-08 HIGH 7.6 CVE-2025-64522 Soft Serve is a self-hostable Git server for the command line. Versions prior to 0.11.1 have a SSRF vulnerability where webhook URLs are not validate… Soft Serve 0.11.1+ Fix from $1,9502025-11-10 HIGH 8.8 CVE-2025-22130 Soft Serve is a self-hostable Git server for the command line. Prior to 0.8.2 , a path traversal attack allows existing non-admin users to access and… Soft Serve 0.8.2+ Fix from $1,9502025-01-08 HIGH 7.5 CVE-2023-43809 Soft Serve is a self-hostable Git server for the command line. Prior to version 0.6.2, a security vulnerability in Soft Serve could allow an unauthen… Soft Serve 0.6.2+ Fix from $1,9502023-10-04 CRITICAL 9.8 CVE-2022-29180 A vulnerability in which attackers could forge HTTP requests to manipulate the `charm` data directory to access or delete anything on the server. Thi… Charm 0.12.1+ Fix from $2,3002022-05-07