Affected by GO-2023-2097 and 7 other vulnerabilities

GO-2023-2097: Soft Serve Public Key Authentication Bypass Vulnerability when Keyboard-Interactive SSH Authentication is Enabled in github.com/charmbracelet/soft-serve

GO-2024-3019: soft-serve vulnerable to arbitrary code execution by crafting git-lfs requests in github.com/charmbracelet/soft-serve

GO-2025-3374: Soft Serve vulnerable to path traversal attacks in github.com/charmbracelet/soft-serve

GO-2025-3930: Soft Serve vulnerable to arbitrary file writing through SSH API in github.com/charmbracelet/soft-serve

GO-2025-4106: Soft Serve does not sanitize ANSI escape sequences in user input in github.com/charmbracelet/soft-serve

GO-2025-4111: Soft Serve is vulnerable to SSRF through its Webhooks in github.com/charmbracelet/soft-serve

GO-2026-4290: Soft Serve is missing an authorization check in LFS lock deletion in github.com/charmbracelet/soft-serve

GO-2026-4353: Soft Serve Affected by an Authentication Bypass in github.com/charmbracelet/soft-serve

cmd

package

v0.5.1 Latest Latest Go to latest Published: May 3, 2023 License: MIT Imports: 25 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/charmbracelet/soft-serve

Links

Open Source Insights

Documentation ¶

Index ¶

Variables
func Middleware(cfg *config.Config) wish.Middleware
type ContextKey
- func (c ContextKey) String() string

Constants ¶

This section is empty.

Variables ¶

View Source

var (
	// ConfigCtxKey is the key for the config in the context.
	ConfigCtxKey = ContextKey("config")
	// SessionCtxKey is the key for the session in the context.
	SessionCtxKey = ContextKey("session")
	// HooksCtxKey is the key for the git hooks in the context.
	HooksCtxKey = ContextKey("hooks")
)

Functions ¶

func Middleware ¶ added in v0.5.0

func Middleware(cfg *config.Config) wish.Middleware

Middleware is the Soft Serve middleware that handles SSH commands.

Types ¶

type ContextKey ¶ added in v0.4.0

type ContextKey string

ContextKey is a type that can be used as a key in a context.

func (ContextKey) String ¶ added in v0.4.0

func (c ContextKey) String() string

String returns the string representation of the ContextKey.

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL