Affected by GO-2024-3019 and 6 other vulnerabilities

GO-2024-3019: soft-serve vulnerable to arbitrary code execution by crafting git-lfs requests in github.com/charmbracelet/soft-serve

GO-2025-3374: Soft Serve vulnerable to path traversal attacks in github.com/charmbracelet/soft-serve

GO-2025-3930: Soft Serve vulnerable to arbitrary file writing through SSH API in github.com/charmbracelet/soft-serve

GO-2025-4106: Soft Serve does not sanitize ANSI escape sequences in user input in github.com/charmbracelet/soft-serve

GO-2025-4111: Soft Serve is vulnerable to SSRF through its Webhooks in github.com/charmbracelet/soft-serve

GO-2026-4290: Soft Serve is missing an authorization check in LFS lock deletion in github.com/charmbracelet/soft-serve

GO-2026-4353: Soft Serve Affected by an Authentication Bypass in github.com/charmbracelet/soft-serve

ssh

package

v0.6.2 Latest Latest Go to latest Published: Oct 2, 2023 License: MIT Imports: 29 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/charmbracelet/soft-serve

Links

Open Source Insights

Documentation ¶

Index ¶

Variables
func AuthenticationMiddleware(sh ssh.Handler) ssh.Handler
func CommandMiddleware(sh ssh.Handler) ssh.Handler
func ContextMiddleware(cfg *config.Config, dbx *db.DB, datastore store.Store, be *backend.Backend, ...) func(ssh.Handler) ssh.Handler
func LoggingMiddleware(sh ssh.Handler) ssh.Handler
func SessionHandler(s ssh.Session) *tea.Program
type SSHServer
- func NewSSHServer(ctx context.Context) (*SSHServer, error)

Constants ¶

This section is empty.

Variables ¶

View Source

var ErrPermissionDenied = fmt.Errorf("permission denied")

ErrPermissionDenied is returned when a user is not allowed connect.

Functions ¶

func AuthenticationMiddleware ¶ added in v0.6.2

func AuthenticationMiddleware(sh ssh.Handler) ssh.Handler

AuthenticationMiddleware handles authentication.

func CommandMiddleware ¶ added in v0.6.0

func CommandMiddleware(sh ssh.Handler) ssh.Handler

CommandMiddleware handles git commands and CLI commands. This middleware must be run after the ContextMiddleware.

func ContextMiddleware ¶ added in v0.6.0

func ContextMiddleware(cfg *config.Config, dbx *db.DB, datastore store.Store, be *backend.Backend, logger *log.Logger) func(ssh.Handler) ssh.Handler

ContextMiddleware adds the config, backend, and logger to the session context.

func LoggingMiddleware ¶ added in v0.6.0

func LoggingMiddleware(sh ssh.Handler) ssh.Handler

LoggingMiddleware logs the ssh connection and command.

func SessionHandler ¶

func SessionHandler(s ssh.Session) *tea.Program

SessionHandler is the soft-serve bubbletea ssh session handler. This middleware must be run after the ContextMiddleware.

Types ¶

type SSHServer ¶

type SSHServer struct {
	// contains filtered or unexported fields
}

SSHServer is a SSH server that implements the git protocol.

func NewSSHServer ¶

func NewSSHServer(ctx context.Context) (*SSHServer, error)

NewSSHServer returns a new SSHServer.

func (*SSHServer) Close ¶

func (s *SSHServer) Close() error

Close closes the SSH server.

func (*SSHServer) KeyboardInteractiveHandler ¶

func (s *SSHServer) KeyboardInteractiveHandler(ctx ssh.Context, _ gossh.KeyboardInteractiveChallenge) bool

KeyboardInteractiveHandler handles keyboard interactive authentication. This is used after all public key authentication has failed.

func (*SSHServer) ListenAndServe ¶

func (s *SSHServer) ListenAndServe() error

ListenAndServe starts the SSH server.

func (*SSHServer) PublicKeyHandler ¶

func (s *SSHServer) PublicKeyHandler(ctx ssh.Context, pk ssh.PublicKey) (allowed bool)

PublicKeyAuthHandler handles public key authentication.

func (*SSHServer) Serve ¶

func (s *SSHServer) Serve(l net.Listener) error

Serve starts the SSH server on the given net.Listener.

func (*SSHServer) Shutdown ¶

func (s *SSHServer) Shutdown(ctx context.Context) error

Shutdown gracefully shuts down the SSH server.

Source Files ¶

View all Source files

Directories ¶

Path	Synopsis
cmd

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL