PkgSeer

Vulnerabilities

Last updated 3 hours ago
Filters
Severity
Critical Severity
CVSS Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
High Severity
CVSS Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
Medium Severity
CVSS Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
Low Severity
CVSS Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
Unknown Severity
CVSS Score Range: No score
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
Package Summary Severity Published Modified
github.com/charmbracelet/soft-serve charmbracelet/soft-serve: Race in `SetPrivate` leaves a private repository readable by unauthenticated users Medium Risk 5.9 15 hours ago 15 hours ago
github.com/charmbracelet/soft-serve charmbracelet/soft-serve HTTP responses disclose the existence and names of private repositories Medium Risk 5.3 15 hours ago 15 hours ago
github.com/charmbracelet/soft-serve Soft Serve Public Key Authentication Bypass Vulnerability when Keyboard-Interactive SSH Authentication is Enabled High Risk 7.5 3 years ago 1 month ago
github.com/charmbracelet/soft-serve In Soft Serve, an authenticated repo import can clone server-local private repositories High Risk 8.0 7 months ago 7 months ago
github.com/charmbracelet/soft-serve In Soft Serve, an authenticated repo import can clone server-local private repositories in github.com/charmbracelet/soft-serve Unknown 7 months ago 7 months ago
github.com/charmbracelet/soft-serve soft-serve vulnerable to SSRF via unvalidated LFS endpoint in repo import Critical 9.1 7 months ago 7 months ago
github.com/charmbracelet/soft-serve soft-serve vulnerable to SSRF via unvalidated LFS endpoint in repo import in github.com/charmbracelet/soft-serve Unknown 7 months ago 7 months ago
github.com/charmbracelet/soft-serve Soft Serve Affected by an Authentication Bypass in github.com/charmbracelet/soft-serve Unknown 9 months ago 8 months ago
github.com/charmbracelet/soft-serve Soft Serve is missing an authorization check in LFS lock deletion in github.com/charmbracelet/soft-serve Unknown 9 months ago 8 months ago
github.com/charmbracelet/soft-serve Soft Serve is vulnerable to SSRF through its Webhooks in github.com/charmbracelet/soft-serve Unknown 11 months ago 8 months ago
github.com/charmbracelet/soft-serve Soft Serve does not sanitize ANSI escape sequences in user input in github.com/charmbracelet/soft-serve Unknown 11 months ago 8 months ago
github.com/charmbracelet/soft-serve Soft Serve vulnerable to arbitrary file writing through SSH API in github.com/charmbracelet/soft-serve Unknown 1 year ago 8 months ago
github.com/charmbracelet/soft-serve Soft Serve vulnerable to path traversal attacks in github.com/charmbracelet/soft-serve Unknown 1 year ago 8 months ago
github.com/charmbracelet/soft-serve soft-serve vulnerable to arbitrary code execution by crafting git-lfs requests in github.com/charmbracelet/soft-serve Unknown 2 years ago 8 months ago
github.com/charmbracelet/soft-serve Soft Serve Public Key Authentication Bypass Vulnerability when Keyboard-Interactive SSH Authentication is Enabled in github.com/charmbracelet/soft-serve Unknown 2 years ago 8 months ago
github.com/charmbracelet/soft-serve Soft Serve is missing an authorization check in LFS lock deletion Medium Risk 5.4 9 months ago 9 months ago
github.com/charmbracelet/soft-serve Soft Serve Affected by an Authentication Bypass High Risk 8.0 9 months ago 9 months ago
github.com/charmbracelet/soft-serve Soft Serve does not sanitize ANSI escape sequences in user input Medium Risk 4.6 11 months ago 11 months ago
github.com/charmbracelet/soft-serve Soft Serve is vulnerable to SSRF through its Webhooks Critical 9.1 11 months ago 11 months ago
github.com/charmbracelet/soft-serve Soft Serve vulnerable to arbitrary file writing through SSH API High Risk 7.7 1 year ago 1 year ago
github.com/charmbracelet/soft-serve Soft Serve vulnerable to path traversal attacks Medium Risk 6.0 1 year ago 1 year ago
github.com/charmbracelet/soft-serve soft-serve vulnerable to arbitrary code execution by crafting git-lfs requests High Risk 8.1 2 years ago 2 years ago
Data courtesy of OSV.dev
Page 1