CNNVD-202601-1403 Information
Jan 08, 2026
cve
CNNVD ID
CNNVD-202601-1403
Related CVE
- CNNVD Published: 2026-01-08
Description (Chinese)
Soft Serve是Charm开源的一个可自托管的命令行 Git 服务器。 Soft Serve 0.11.2之前版本存在安全漏洞，该漏洞源于LFS锁删除端点存在授权绕过，可能导致锁被任意删除。
Description (English)
Soft Serve is a self-serving command line of Charming open source Git server. There was a security loophole in the pre-Soft Serve 0.11.2 version, which stemmed from the presence of authorized deviations from the LFS-lock removal endpoint, which could lead to arbitrary removal of the lock.
Hazard Level
High
Vulnerability Type
其他
Affected Vendor
Charm
Published
2026-01-08
Last Modified
2026-02-24
References
https://github.com/charmbracelet/soft-serve/commit/000ab5164f0be68cf1ea6b6e7227f11c0e388a42 https://github.com/charmbracelet/soft-serve/security/advisories/GHSA-6jm8-x3g6-r33j https://access.redhat.com/security/cve/cve-2026-22253
Patch
https://github.com/charmbracelet/soft-serve/releases
Share on: