VDB

GO-2026-4788

GO-2026-4788 PUBLISHED

In Soft Serve, an authenticated repo import can clone server-local private repositories in github.com/charmbracelet/soft-serve

Affected Products

VendorProductVersions
github.comcharmbracelet/soft-serve0.6.0, 0.6.0

Timeline

  • Mar 23, 2026 CVE Published
  • Mar 23, 2026 CVE Updated

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›