https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T06:32:18.825461+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-64494 CVE-2025-64494 — Soft Serve does not sanitize ANSI escape sequences in user input 2026-10-07T06:32:18.841839+00:00

Affected: charmbracelet soft-serve

Soft Serve is a self-hostable Git server for the command line. In versions prior to 0.10.0, there are several places where the user can insert data (e.g. names) and ANSI escape sequences are not being removed, which can then be used, for example, to show fake alerts. In the same token, git messages, when printed, are also not being sanitized. This issue is fixed in version 0.10.0.