https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 11:22:22 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-209636 EUVD-2026-209636 https://cve.radiocsirt.org/vuln/euvd-2026-209636 https://cve.radiocsirt.org/vuln/fkie_cve-2025-22130 <p>Soft Serve is a self-hostable Git server for the command line. Prior to 0.8.2 , a path traversal attack allows existing non-admin users to access and take over other user&#39;s repositories. A malicious user then can modify, delete, and arbitrarily repositories as if they were an admin user without explicitly giving them permissions. This is patched in v0.8.2.</p> <p>Soft Serve is a self-hostable Git server for the command line. Prior to 0.8.2 , a path traversal attack allows existing non-admin users to access and take over other user&#39;s repositories. A malicious user then can modify, delete, and arbitrarily repositories as if they were an admin user without explicitly giving them permissions. This is patched in v0.8.2.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-22130 https://cve.radiocsirt.org/vuln/ghsa-j4jw-m6xr-fv6c <p><strong>Affected:</strong> Go: github.com/charmbracelet/soft-serve</p> <p>### Impact</p> <p>Path traversal attack gives access to existing non-admin users to access and take over other user&#39;s repositories. A malicious user then can modify, delete, and arbitrarily repositories as if they were an admin user without explicitly giving them permissions.</p> <p>### Patches</p> <p>This is patched in [v0.8.2](https://github.com/charmbracelet/soft-serve/releases/tag/v0.8.2)</p> <p>### Workarounds</p> <p>Single user set-ups are not affected. This only affects multi-user Soft Serve set-ups that enable repository creation for users. Otherwise, upgrading is necessary to circumvent the attack.</p> <p><strong>Affected:</strong> Go: github.com/charmbracelet/soft-serve</p> <p>### Impact</p> <p>Path traversal attack gives access to existing non-admin users to access and take over other user&#39;s repositories. A malicious user then can modify, delete, and arbitrarily repositories as if they were an admin user without explicitly giving them permissions.</p> <p>### Patches</p> <p>This is patched in [v0.8.2](https://github.com/charmbracelet/soft-serve/releases/tag/v0.8.2)</p> <p>### Workarounds</p> <p>Single user set-ups are not affected. This only affects multi-user Soft Serve set-ups that enable repository creation for users. Otherwise, upgrading is necessary to circumvent the attack.</p> https://cve.radiocsirt.org/vuln/ghsa-j4jw-m6xr-fv6c https://cve.radiocsirt.org/vuln/opensuse-su-2025:14624-1 <p>govulncheck-vulndb-0.0.20250108T191942-1.1 on GA media</p> <p>govulncheck-vulndb-0.0.20250108T191942-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2025:14624-1 https://cve.radiocsirt.org/vuln/suse-su-2025:0060-1 <p>Security update for govulncheck-vulndb</p> <p>Security update for govulncheck-vulndb</p> https://cve.radiocsirt.org/vuln/suse-su-2025:0060-1