VDB
GO-2026-4290
GO-2026-4290
PUBLISHED
Soft Serve is missing an authorization check in LFS lock deletion in github.com/charmbracelet/soft-serve
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| github.com | charmbracelet/soft-serve | 0, 0 |
Timeline
- Jan 12, 2026 CVE Published
- Mar 3, 2026 CVE Updated
- May 1, 2026 Security Advisory