Skip to content
OpenAdvisories

Vendor

coderamp-labs

2 known vulnerabilities.

Products

gitingest 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2026-110767

    Gitingest through 0.3.1 Arbitrary File Read via Symlink in Blob Ingestion

    Gitingest through 0.3.1 contains a symlink following vulnerability in ingest_query single-file blob ingestion that allows unauthenticated attackers to read server files by submitting symlink blob URLs. Attackers can commit a symlink to a public repository and…

    coderamp-labs gitingest
  • High 7.4
    CVE-2026-82289

    Gitingest Prefix-Based Git Host Check Enables Request Forgery and Token Disclosure

    Gitingest through 0.3.1 fails to properly validate hostnames in _validate_host, accepting any host with a git., gitlab., or github. prefix regardless of known-hosts list membership. Attackers can submit URLs with attacker-controlled hostnames to trigger outbo…

    coderamp-labs gitingest