Vulnerabilities

TI-2026-25759 CVE-2026-33353 · GHSA-xgxp-f695-6vrp

Soft Serve: Authenticated repo import can clone server-local private repositories

HIGH 70

Soft Serve is a self-hostable Git server for the command line.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00378 Published 2026-03-24 Fixed in 0.11.6 CWE-200

TI-2026-23661 CVE-2026-30832 · GHSA-3fvx-xrxq-8jvv

HIGH 72

Soft Serve is a self-hostable Git server for the command line.

CVSS 3.1CRITICAL 9.1 Network Low privileges No interaction EPSS 0.00365 Published 2026-03-07 Fixed in 0.11.4 CWE-918

TI-2026-19385 CVE-2026-24058 · GHSA-pchf-49fh-w34r

LOW 38

Soft Serve is a self-hostable Git server for the command line.

CVSS 4.0HIGH 8.1 Network No auth No interaction EPSS 0.00578 Published 2026-01-22 Fixed in 0.11.3 CWE-289

TI-2026-17863 CVE-2026-22253 · GHSA-6jm8-x3g6-r33j

MEDIUM 58

Soft Serve is a self-hostable Git server for the command line.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00303 Published 2026-01-08 Fixed in 0.11.2 CWE-863

TI-2025-39912 CVE-2025-64522 · GHSA-vwq2-jx9q-9h9f

HIGH 72

Soft Serve is a self-hostable Git server for the command line.

CVSS 3.1CRITICAL 9.1 Network Low privileges No interaction EPSS 0.00368 Published 2025-11-10 Fixed in 0.11.1 CWE-918

TI-2025-16079 CVE-2025-22130 · GHSA-j4jw-m6xr-fv6c

LOW 25

Soft Serve is a self-hostable Git server for the command line.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00698 Published 2025-01-08 Fixed in 0.8.2 CWE-22

TI-2023-23497 CVE-2023-43809 · GHSA-mc97-99j4-vm2v

HIGH 72

Soft Serve is a self-hostable Git server for the command line.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01217 Published 2023-10-04 Fixed in 0.6.2 CWE-287