Affected by GO-2024-3019 and 1 other vulnerabilities

GO-2024-3019: soft-serve vulnerable to arbitrary code execution by crafting git-lfs requests in github.com/charmbracelet/soft-serve

GO-2025-3374: Soft Serve vulnerable to path traversal attacks in github.com/charmbracelet/soft-serve

pkg/

Details

Path	Synopsis
access
backend
config
cron
daemon
db
migrate
models
git
hooks
jobs
jwk
lfs
log
proto
ssh
cmd
sshutils
stats
storage
store
database
sync
task
test
ui
common
components/code
components/footer
components/header
components/selector
components/statusbar
components/tabs
components/viewport
keymap
pages/repo
pages/selection
styles
utils
version Package version is used to store the version of the server during runtime.	Package version is used to store the version of the server during runtime.
web
webhook