VULNRABLE / Vulnerability / GHSA-f3fj-9625-rv3m
GHSA-f3fj-9625-rv3m
MEDIUM LOW github.com/charmbracelet/soft-serve GHSA
Exploit verdict: No active-exploit signal
CVSS Score
5.5
Severity
MEDIUM
EPSS
—
Source
GHSA
Summary
charmbracelet/soft-serve: Race in `SetPrivate` leaves a private repository readable by unauthenticated users
What this means
GHSA-f3fj-9625-rv3m is a medium-severity vulnerability affecting github.com/charmbracelet/soft-serve, rated CVSS 5.5. Published October 30, 2026.
View full advisory at GHSA →