Skip to content
OpenAdvisories

Package · Go

github.com/charmbracelet/charm

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 5.9

    Charm vulnerable to server-side request forgery (SSRF)

    A vulnerability in which attackers could forge HTTP requests to manipulate the `charm` data directory to access or delete anything on the server. This has been patched and is available in release [v0.12.1](https://github.com/charmbracelet/charm/releases/tag/v…