Vulnerability index

Browse CVEs

9 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Wish CRITICAL 9.6
CVE-2026-41589

Wish is an SSH server with defaults and a collection of middlewares. From version 2.0.0 to before version 2.0.1, the SCP middleware in charm.land/wis…

No fix yet
Fix from $2,300 2026-05-07
Soft Serve MEDIUM 6.5
CVE-2026-33353

Soft Serve is a self-hostable Git server for the command line. From version 0.6.0 to before version 0.11.6, an authorization flaw in repo import allo…

Fix: 0.11.6+
Fix from $1,600 2026-03-24
Soft Serve CRITICAL 9.1
CVE-2026-30832

Soft Serve is a self-hostable Git server for the command line. From version 0.6.0 to before version 0.11.4, an authenticated SSH user can force the s…

Fix: 0.11.4+
Fix from $2,300 2026-03-07
Soft Serve CRITICAL 9.8
CVE-2026-24058

Soft Serve is a self-hostable Git server for the command line. Versions 0.11.2 and below have a critical authentication bypass vulnerability that all…

Fix: 0.11.3+
Fix from $2,300 2026-01-22
Soft Serve MEDIUM 5.4
CVE-2026-22253

Soft Serve is a self-hostable Git server for the command line. Prior to version 0.11.2, an authorization bypass in the LFS lock deletion endpoint all…

Fix: 0.11.2+
Fix from $1,600 2026-01-08
Soft Serve HIGH 7.6
CVE-2025-64522

Soft Serve is a self-hostable Git server for the command line. Versions prior to 0.11.1 have a SSRF vulnerability where webhook URLs are not validate…

Fix: 0.11.1+
Fix from $1,950 2025-11-10
Soft Serve HIGH 8.8
CVE-2025-22130

Soft Serve is a self-hostable Git server for the command line. Prior to 0.8.2 , a path traversal attack allows existing non-admin users to access and…

Fix: 0.8.2+
Fix from $1,950 2025-01-08
Soft Serve HIGH 7.5
CVE-2023-43809

Soft Serve is a self-hostable Git server for the command line. Prior to version 0.6.2, a security vulnerability in Soft Serve could allow an unauthen…

Fix: 0.6.2+
Fix from $1,950 2023-10-04
Charm CRITICAL 9.8
CVE-2022-29180

A vulnerability in which attackers could forge HTTP requests to manipulate the `charm` data directory to access or delete anything on the server. Thi…

Fix: 0.12.1+
Fix from $2,300 2022-05-07