UNKNOWN Go
charmbracelet/soft-serve HTTP responses disclose the existence and names of private repositories in github.com/charmbracelet/soft-serve
GO-2026-6892 · GHSA-fgxm-5hvv-x4vh
Published · Modified
AI SAST
Find this class of vulnerability in your own code
Corgea's AI-native static analysis detects vulnerabilities like this one across your repositories, ranks them by exploitability, and returns review-ready fixes.
Description
charmbracelet/soft-serve HTTP responses disclose the existence and names of private repositories in github.com/charmbracelet/soft-serve
References
- ADVISORY https://github.com/charmbracelet/soft-serve/security/advisories/GHSA-fgxm-5hvv-x4vh
- FIX https://github.com/charmbracelet/soft-serve/commit/74e41543304d1e12fd54fc59e410bd428373dd34
- FIX https://github.com/charmbracelet/soft-serve/commit/dc351aa0d824c8bef528c6924a7acdfb9f20c852
- WEB https://github.com/charmbracelet/soft-serve/releases/tag/v0.12.3
Ready to move
Start Securing
Free, no credit card | First findings in minutes