Skip to content
OpenAdvisories

Vendor

charmbracelet

14 known vulnerabilities.

Products

soft-serve 11 wish 2 charm 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.6
    CVE-2026-41589

    Wish has SCP Path Traversal that allows arbitrary file read/write

    Wish is an SSH server with defaults and a collection of middlewares. From version 2.0.0 to before version 2.0.1, the SCP middleware in charm.land/wish/v2 is vulnerable to path traversal attacks. A malicious SCP client can read arbitrary files from the server,…

    charmbracelet wish github.com/charmbracelet/wish charm.land/wish/v2 Go
  • Critical 9.1
    CVE-2026-30832

    Soft Serve: SSRF via unvalidated LFS endpoint in repo import

    Soft Serve is a self-hostable Git server for the command line. From version 0.6.0 to before version 0.11.4, an authenticated SSH user can force the server to make HTTP requests to internal/private IP addresses by running repo import with a crafted --lfs-endpo…

    charmbracelet soft-serve github.com/charmbracelet/soft-serve Go
  • Critical 9.1
    CVE-2025-64522

    Soft Serve is vulnerable to SSRF through its Webhooks

    Soft Serve is a self-hostable Git server for the command line. Versions prior to 0.11.1 have a SSRF vulnerability where webhook URLs are not validated, allowing repository administrators to create webhooks targeting internal services, private networks, and cl…

    charmbracelet soft-serve github.com/charmbracelet/soft-serve Go