code

Mar 6, 2026 GO-2026-4788

  GO-2026-4788: In Soft Serve, an authenticated repo import can clone server-local private repositories in github.com/charmbracelet/soft-serve

Mar 5, 2026 GO-2026-4788

  GO-2026-4788: In Soft Serve, an authenticated repo import can clone server-local private repositories in github.com/charmbracelet/soft-serve

Jan 21, 2026 GO-2026-4634 +1 more

  GO-2026-4634: soft-serve vulnerable to SSRF via unvalidated LFS endpoint in repo import in github.com/charmbracelet/soft-serve

  GO-2026-4788: In Soft Serve, an authenticated repo import can clone server-local private repositories in github.com/charmbracelet/soft-serve

Jan 8, 2026 GO-2026-4353 +2 more

  GO-2026-4353: Soft Serve Affected by an Authentication Bypass in github.com/charmbracelet/soft-serve

  GO-2026-4634: soft-serve vulnerable to SSRF via unvalidated LFS endpoint in repo import in github.com/charmbracelet/soft-serve

  GO-2026-4788: In Soft Serve, an authenticated repo import can clone server-local private repositories in github.com/charmbracelet/soft-serve

Nov 10, 2025 GO-2026-4290 +3 more

  GO-2026-4290: Soft Serve is missing an authorization check in LFS lock deletion in github.com/charmbracelet/soft-serve

  GO-2026-4353: Soft Serve Affected by an Authentication Bypass in github.com/charmbracelet/soft-serve

  GO-2026-4634: soft-serve vulnerable to SSRF via unvalidated LFS endpoint in repo import in github.com/charmbracelet/soft-serve

  GO-2026-4788: In Soft Serve, an authenticated repo import can clone server-local private repositories in github.com/charmbracelet/soft-serve

Nov 6, 2025 GO-2025-4111 +4 more

  GO-2025-4111: Soft Serve is vulnerable to SSRF through its Webhooks in github.com/charmbracelet/soft-serve

  GO-2026-4290: Soft Serve is missing an authorization check in LFS lock deletion in github.com/charmbracelet/soft-serve

  GO-2026-4353: Soft Serve Affected by an Authentication Bypass in github.com/charmbracelet/soft-serve

  GO-2026-4634: soft-serve vulnerable to SSRF via unvalidated LFS endpoint in repo import in github.com/charmbracelet/soft-serve

  GO-2026-4788: In Soft Serve, an authenticated repo import can clone server-local private repositories in github.com/charmbracelet/soft-serve

Aug 27, 2025 GO-2025-4106 +5 more

  GO-2025-4106: Soft Serve does not sanitize ANSI escape sequences in user input in github.com/charmbracelet/soft-serve

  GO-2025-4111: Soft Serve is vulnerable to SSRF through its Webhooks in github.com/charmbracelet/soft-serve

  GO-2026-4290: Soft Serve is missing an authorization check in LFS lock deletion in github.com/charmbracelet/soft-serve

  GO-2026-4353: Soft Serve Affected by an Authentication Bypass in github.com/charmbracelet/soft-serve

  GO-2026-4634: soft-serve vulnerable to SSRF via unvalidated LFS endpoint in repo import in github.com/charmbracelet/soft-serve

  GO-2026-4788: In Soft Serve, an authenticated repo import can clone server-local private repositories in github.com/charmbracelet/soft-serve

Jul 3, 2025 GO-2025-3930 +6 more

  GO-2025-3930: Soft Serve vulnerable to arbitrary file writing through SSH API in github.com/charmbracelet/soft-serve

  GO-2025-4106: Soft Serve does not sanitize ANSI escape sequences in user input in github.com/charmbracelet/soft-serve

  GO-2025-4111: Soft Serve is vulnerable to SSRF through its Webhooks in github.com/charmbracelet/soft-serve

  GO-2026-4290: Soft Serve is missing an authorization check in LFS lock deletion in github.com/charmbracelet/soft-serve

  GO-2026-4353: Soft Serve Affected by an Authentication Bypass in github.com/charmbracelet/soft-serve

  GO-2026-4634: soft-serve vulnerable to SSRF via unvalidated LFS endpoint in repo import in github.com/charmbracelet/soft-serve

  GO-2026-4788: In Soft Serve, an authenticated repo import can clone server-local private repositories in github.com/charmbracelet/soft-serve

Jul 3, 2025 GO-2025-3930 +6 more

  GO-2025-3930: Soft Serve vulnerable to arbitrary file writing through SSH API in github.com/charmbracelet/soft-serve

  GO-2025-4106: Soft Serve does not sanitize ANSI escape sequences in user input in github.com/charmbracelet/soft-serve

  GO-2025-4111: Soft Serve is vulnerable to SSRF through its Webhooks in github.com/charmbracelet/soft-serve

  GO-2026-4290: Soft Serve is missing an authorization check in LFS lock deletion in github.com/charmbracelet/soft-serve

  GO-2026-4353: Soft Serve Affected by an Authentication Bypass in github.com/charmbracelet/soft-serve

  GO-2026-4634: soft-serve vulnerable to SSRF via unvalidated LFS endpoint in repo import in github.com/charmbracelet/soft-serve

  GO-2026-4788: In Soft Serve, an authenticated repo import can clone server-local private repositories in github.com/charmbracelet/soft-serve

Mar 25, 2025 GO-2025-3930 +6 more

  GO-2025-3930: Soft Serve vulnerable to arbitrary file writing through SSH API in github.com/charmbracelet/soft-serve

  GO-2025-4106: Soft Serve does not sanitize ANSI escape sequences in user input in github.com/charmbracelet/soft-serve

  GO-2025-4111: Soft Serve is vulnerable to SSRF through its Webhooks in github.com/charmbracelet/soft-serve

  GO-2026-4290: Soft Serve is missing an authorization check in LFS lock deletion in github.com/charmbracelet/soft-serve

  GO-2026-4353: Soft Serve Affected by an Authentication Bypass in github.com/charmbracelet/soft-serve

  GO-2026-4634: soft-serve vulnerable to SSRF via unvalidated LFS endpoint in repo import in github.com/charmbracelet/soft-serve

  GO-2026-4788: In Soft Serve, an authenticated repo import can clone server-local private repositories in github.com/charmbracelet/soft-serve

Mar 20, 2025 GO-2025-3930 +6 more

  GO-2025-3930: Soft Serve vulnerable to arbitrary file writing through SSH API in github.com/charmbracelet/soft-serve

  GO-2025-4106: Soft Serve does not sanitize ANSI escape sequences in user input in github.com/charmbracelet/soft-serve

  GO-2025-4111: Soft Serve is vulnerable to SSRF through its Webhooks in github.com/charmbracelet/soft-serve

  GO-2026-4290: Soft Serve is missing an authorization check in LFS lock deletion in github.com/charmbracelet/soft-serve

  GO-2026-4353: Soft Serve Affected by an Authentication Bypass in github.com/charmbracelet/soft-serve

  GO-2026-4634: soft-serve vulnerable to SSRF via unvalidated LFS endpoint in repo import in github.com/charmbracelet/soft-serve

  GO-2026-4788: In Soft Serve, an authenticated repo import can clone server-local private repositories in github.com/charmbracelet/soft-serve

Mar 20, 2025 GO-2025-3930 +6 more

  GO-2025-3930: Soft Serve vulnerable to arbitrary file writing through SSH API in github.com/charmbracelet/soft-serve

  GO-2025-4106: Soft Serve does not sanitize ANSI escape sequences in user input in github.com/charmbracelet/soft-serve

  GO-2025-4111: Soft Serve is vulnerable to SSRF through its Webhooks in github.com/charmbracelet/soft-serve

  GO-2026-4290: Soft Serve is missing an authorization check in LFS lock deletion in github.com/charmbracelet/soft-serve

  GO-2026-4353: Soft Serve Affected by an Authentication Bypass in github.com/charmbracelet/soft-serve

  GO-2026-4634: soft-serve vulnerable to SSRF via unvalidated LFS endpoint in repo import in github.com/charmbracelet/soft-serve

  GO-2026-4788: In Soft Serve, an authenticated repo import can clone server-local private repositories in github.com/charmbracelet/soft-serve

Jan 7, 2025 GO-2025-3930 +6 more

  GO-2025-3930: Soft Serve vulnerable to arbitrary file writing through SSH API in github.com/charmbracelet/soft-serve

  GO-2025-4106: Soft Serve does not sanitize ANSI escape sequences in user input in github.com/charmbracelet/soft-serve

  GO-2025-4111: Soft Serve is vulnerable to SSRF through its Webhooks in github.com/charmbracelet/soft-serve

  GO-2026-4290: Soft Serve is missing an authorization check in LFS lock deletion in github.com/charmbracelet/soft-serve

  GO-2026-4353: Soft Serve Affected by an Authentication Bypass in github.com/charmbracelet/soft-serve

  GO-2026-4634: soft-serve vulnerable to SSRF via unvalidated LFS endpoint in repo import in github.com/charmbracelet/soft-serve

  GO-2026-4788: In Soft Serve, an authenticated repo import can clone server-local private repositories in github.com/charmbracelet/soft-serve

Dec 11, 2024 GO-2025-3374 +7 more

  GO-2025-3374: Soft Serve vulnerable to path traversal attacks in github.com/charmbracelet/soft-serve

  GO-2025-3930: Soft Serve vulnerable to arbitrary file writing through SSH API in github.com/charmbracelet/soft-serve

  GO-2025-4106: Soft Serve does not sanitize ANSI escape sequences in user input in github.com/charmbracelet/soft-serve

  GO-2025-4111: Soft Serve is vulnerable to SSRF through its Webhooks in github.com/charmbracelet/soft-serve

  GO-2026-4290: Soft Serve is missing an authorization check in LFS lock deletion in github.com/charmbracelet/soft-serve

  GO-2026-4353: Soft Serve Affected by an Authentication Bypass in github.com/charmbracelet/soft-serve

  GO-2026-4634: soft-serve vulnerable to SSRF via unvalidated LFS endpoint in repo import in github.com/charmbracelet/soft-serve

  GO-2026-4788: In Soft Serve, an authenticated repo import can clone server-local private repositories in github.com/charmbracelet/soft-serve

Dec 9, 2024 GO-2025-3374 +7 more

  GO-2025-3374: Soft Serve vulnerable to path traversal attacks in github.com/charmbracelet/soft-serve

  GO-2025-3930: Soft Serve vulnerable to arbitrary file writing through SSH API in github.com/charmbracelet/soft-serve

  GO-2025-4106: Soft Serve does not sanitize ANSI escape sequences in user input in github.com/charmbracelet/soft-serve

  GO-2025-4111: Soft Serve is vulnerable to SSRF through its Webhooks in github.com/charmbracelet/soft-serve

  GO-2026-4290: Soft Serve is missing an authorization check in LFS lock deletion in github.com/charmbracelet/soft-serve

  GO-2026-4353: Soft Serve Affected by an Authentication Bypass in github.com/charmbracelet/soft-serve

  GO-2026-4634: soft-serve vulnerable to SSRF via unvalidated LFS endpoint in repo import in github.com/charmbracelet/soft-serve

  GO-2026-4788: In Soft Serve, an authenticated repo import can clone server-local private repositories in github.com/charmbracelet/soft-serve

Jul 31, 2024 GO-2025-3374 +7 more

  GO-2025-3374: Soft Serve vulnerable to path traversal attacks in github.com/charmbracelet/soft-serve

  GO-2025-3930: Soft Serve vulnerable to arbitrary file writing through SSH API in github.com/charmbracelet/soft-serve

  GO-2025-4106: Soft Serve does not sanitize ANSI escape sequences in user input in github.com/charmbracelet/soft-serve

  GO-2025-4111: Soft Serve is vulnerable to SSRF through its Webhooks in github.com/charmbracelet/soft-serve

  GO-2026-4290: Soft Serve is missing an authorization check in LFS lock deletion in github.com/charmbracelet/soft-serve

  GO-2026-4353: Soft Serve Affected by an Authentication Bypass in github.com/charmbracelet/soft-serve

  GO-2026-4634: soft-serve vulnerable to SSRF via unvalidated LFS endpoint in repo import in github.com/charmbracelet/soft-serve

  GO-2026-4788: In Soft Serve, an authenticated repo import can clone server-local private repositories in github.com/charmbracelet/soft-serve

Jul 31, 2024 GO-2025-3374 +7 more

  GO-2025-3374: Soft Serve vulnerable to path traversal attacks in github.com/charmbracelet/soft-serve

  GO-2025-3930: Soft Serve vulnerable to arbitrary file writing through SSH API in github.com/charmbracelet/soft-serve

  GO-2025-4106: Soft Serve does not sanitize ANSI escape sequences in user input in github.com/charmbracelet/soft-serve

  GO-2025-4111: Soft Serve is vulnerable to SSRF through its Webhooks in github.com/charmbracelet/soft-serve

  GO-2026-4290: Soft Serve is missing an authorization check in LFS lock deletion in github.com/charmbracelet/soft-serve

  GO-2026-4353: Soft Serve Affected by an Authentication Bypass in github.com/charmbracelet/soft-serve

  GO-2026-4634: soft-serve vulnerable to SSRF via unvalidated LFS endpoint in repo import in github.com/charmbracelet/soft-serve

  GO-2026-4788: In Soft Serve, an authenticated repo import can clone server-local private repositories in github.com/charmbracelet/soft-serve

Dec 7, 2023 GO-2024-3019 +8 more

  GO-2024-3019: soft-serve vulnerable to arbitrary code execution by crafting git-lfs requests in github.com/charmbracelet/soft-serve

  GO-2025-3374: Soft Serve vulnerable to path traversal attacks in github.com/charmbracelet/soft-serve

  GO-2025-3930: Soft Serve vulnerable to arbitrary file writing through SSH API in github.com/charmbracelet/soft-serve

  GO-2025-4106: Soft Serve does not sanitize ANSI escape sequences in user input in github.com/charmbracelet/soft-serve

  GO-2025-4111: Soft Serve is vulnerable to SSRF through its Webhooks in github.com/charmbracelet/soft-serve

  GO-2026-4290: Soft Serve is missing an authorization check in LFS lock deletion in github.com/charmbracelet/soft-serve

  GO-2026-4353: Soft Serve Affected by an Authentication Bypass in github.com/charmbracelet/soft-serve

  GO-2026-4634: soft-serve vulnerable to SSRF via unvalidated LFS endpoint in repo import in github.com/charmbracelet/soft-serve

  GO-2026-4788: In Soft Serve, an authenticated repo import can clone server-local private repositories in github.com/charmbracelet/soft-serve

Nov 19, 2023 GO-2024-3019 +8 more

  GO-2024-3019: soft-serve vulnerable to arbitrary code execution by crafting git-lfs requests in github.com/charmbracelet/soft-serve

  GO-2025-3374: Soft Serve vulnerable to path traversal attacks in github.com/charmbracelet/soft-serve

  GO-2025-3930: Soft Serve vulnerable to arbitrary file writing through SSH API in github.com/charmbracelet/soft-serve

  GO-2025-4106: Soft Serve does not sanitize ANSI escape sequences in user input in github.com/charmbracelet/soft-serve

  GO-2025-4111: Soft Serve is vulnerable to SSRF through its Webhooks in github.com/charmbracelet/soft-serve

  GO-2026-4290: Soft Serve is missing an authorization check in LFS lock deletion in github.com/charmbracelet/soft-serve

  GO-2026-4353: Soft Serve Affected by an Authentication Bypass in github.com/charmbracelet/soft-serve

  GO-2026-4634: soft-serve vulnerable to SSRF via unvalidated LFS endpoint in repo import in github.com/charmbracelet/soft-serve

  GO-2026-4788: In Soft Serve, an authenticated repo import can clone server-local private repositories in github.com/charmbracelet/soft-serve

Nov 16, 2023 GO-2024-3019 +8 more

  GO-2024-3019: soft-serve vulnerable to arbitrary code execution by crafting git-lfs requests in github.com/charmbracelet/soft-serve

  GO-2025-3374: Soft Serve vulnerable to path traversal attacks in github.com/charmbracelet/soft-serve

  GO-2025-3930: Soft Serve vulnerable to arbitrary file writing through SSH API in github.com/charmbracelet/soft-serve

  GO-2025-4106: Soft Serve does not sanitize ANSI escape sequences in user input in github.com/charmbracelet/soft-serve

  GO-2025-4111: Soft Serve is vulnerable to SSRF through its Webhooks in github.com/charmbracelet/soft-serve

  GO-2026-4290: Soft Serve is missing an authorization check in LFS lock deletion in github.com/charmbracelet/soft-serve

  GO-2026-4353: Soft Serve Affected by an Authentication Bypass in github.com/charmbracelet/soft-serve

  GO-2026-4634: soft-serve vulnerable to SSRF via unvalidated LFS endpoint in repo import in github.com/charmbracelet/soft-serve

  GO-2026-4788: In Soft Serve, an authenticated repo import can clone server-local private repositories in github.com/charmbracelet/soft-serve

Nov 1, 2023 GO-2024-3019 +8 more

  GO-2024-3019: soft-serve vulnerable to arbitrary code execution by crafting git-lfs requests in github.com/charmbracelet/soft-serve

  GO-2025-3374: Soft Serve vulnerable to path traversal attacks in github.com/charmbracelet/soft-serve

  GO-2025-3930: Soft Serve vulnerable to arbitrary file writing through SSH API in github.com/charmbracelet/soft-serve

  GO-2025-4106: Soft Serve does not sanitize ANSI escape sequences in user input in github.com/charmbracelet/soft-serve

  GO-2025-4111: Soft Serve is vulnerable to SSRF through its Webhooks in github.com/charmbracelet/soft-serve

  GO-2026-4290: Soft Serve is missing an authorization check in LFS lock deletion in github.com/charmbracelet/soft-serve

  GO-2026-4353: Soft Serve Affected by an Authentication Bypass in github.com/charmbracelet/soft-serve

  GO-2026-4634: soft-serve vulnerable to SSRF via unvalidated LFS endpoint in repo import in github.com/charmbracelet/soft-serve

  GO-2026-4788: In Soft Serve, an authenticated repo import can clone server-local private repositories in github.com/charmbracelet/soft-serve

Oct 31, 2023 GO-2024-3019 +8 more

  GO-2024-3019: soft-serve vulnerable to arbitrary code execution by crafting git-lfs requests in github.com/charmbracelet/soft-serve

  GO-2025-3374: Soft Serve vulnerable to path traversal attacks in github.com/charmbracelet/soft-serve

  GO-2025-3930: Soft Serve vulnerable to arbitrary file writing through SSH API in github.com/charmbracelet/soft-serve

  GO-2025-4106: Soft Serve does not sanitize ANSI escape sequences in user input in github.com/charmbracelet/soft-serve

  GO-2025-4111: Soft Serve is vulnerable to SSRF through its Webhooks in github.com/charmbracelet/soft-serve

  GO-2026-4290: Soft Serve is missing an authorization check in LFS lock deletion in github.com/charmbracelet/soft-serve

  GO-2026-4353: Soft Serve Affected by an Authentication Bypass in github.com/charmbracelet/soft-serve

  GO-2026-4634: soft-serve vulnerable to SSRF via unvalidated LFS endpoint in repo import in github.com/charmbracelet/soft-serve

  GO-2026-4788: In Soft Serve, an authenticated repo import can clone server-local private repositories in github.com/charmbracelet/soft-serve

Changes in this version

+ type Code struct

+ NoContentStyle lipgloss.Style

+ ShowLineNumber bool

+ SideNotePercent float64

+ TabWidth int

+ UseGlamour bool

+ func New(c common.Common, content, extension string) *Code

+ func (r *Code) GotoBottom()

+ func (r *Code) GotoTop()

+ func (r *Code) HalfViewDown()

+ func (r *Code) HalfViewUp()

+ func (r *Code) Init() tea.Cmd

+ func (r *Code) LineDown(n int) []string

+ func (r *Code) LineUp(n int) []string

+ func (r *Code) ScrollPercent() float64

+ func (r *Code) ScrollPosition() int

+ func (r *Code) SetContent(c, ext string) tea.Cmd

+ func (r *Code) SetSideNote(s string) tea.Cmd

+ func (r *Code) SetSize(width, height int)

+ func (r *Code) Update(msg tea.Msg) (tea.Model, tea.Cmd)

+ func (r *Code) View() string

+ func (r *Code) ViewDown() []string

+ func (r *Code) ViewUp() []string