coderamp-labs

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

coderamp-labs records in CISA KEV

No coderamp-labs vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-74426 CVE-2026-110767

Gitingest blob ingestion follows symlinks, exposing server files

HIGH 77

Gitingest through 0.3.1 contains a symlink following vulnerability in ingest_query single-file blob ingestion that allows unauthenticated attackers to read server files by submitting symlink blob URLs.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00407 Published 2026-10-14 No fix listed CWE-59

TI-2026-56754 CVE-2026-82289 · GHSA-mvv9-5ggf-37rj

Gitingest Prefix-Based Git Host Check Enables Request Forgery and Token Disclosure

HIGH 69

Gitingest through 0.3.1 fails to properly validate hostnames in _validate_host, accepting any host with a git., gitlab., or github.

CVSS 4.0HIGH 8.3 Network No auth User interaction EPSS 0.00437 Published 2026-08-28 No fix listed CWE-918

Open these records in search →

Critical	0
High	2
Medium	0
Low	0
No CVSS	0