Vulnerabilities in charmbracelet
12 resultsVexday analysis
A Charm Bracelet apresenta um perfil de risco moderado com 12 CVEs catalogadas, das quais 3 são críticas, porém nenhuma está sob ataque ativo no momento. A fraqueza dominante é contaminação de caminho (CWE-22), indicando problemas de validação de entrada que podem levar a acesso não autorizado a arquivos. O risco é considerado estável, com apenas 1 vulnerabilidade publicada nos últimos 90 dias, sugerindo que a maioria das falhas é conhecida há mais tempo.
CVE-2023-43809HIGHSoft Serve Public Key Authentication Bypass Vulnerability when Keyboard-Interactive SSH Authentication is EnabledEPSS 0.9%CVE-2022-29180MEDIUMCharm vulnerable to server-side request forgery (SSRF)EPSS 0.8%CVE-2025-22130MEDIUMSoft Serve allows path traversal attacksEPSS 0.7%CVE-2026-24058HIGHSoft Serve has Critical Authentication BypassEPSS 0.5%CVE-2024-41956HIGHSoft Serve allows arbitrary code execution by crafting git-lfs requestsEPSS 0.5%CVE-2026-41589CRITICALWish has SCP Path Traversal that allows arbitrary file read/writeEPSS 0.4%CVE-2026-33353HIGHSoft Serve: Authenticated repo import can clone server-local private repositoriesEPSS 0.4%CVE-2025-64522CRITICALSoft Serve is vulnerable to SSRF through its WebhooksEPSS 0.3%CVE-2025-58355HIGHSoft Serve is vulnerable to arbitrary file writing through its SSH APIEPSS 0.3%CVE-2026-30832CRITICALSoft Serve: SSRF via unvalidated LFS endpoint in repo importEPSS 0.3%CVE-2026-22253MEDIUMSoft Serve is missing an authorization check in LFS lock deletionEPSS 0.3%CVE-2025-64494MEDIUMSoft Serve does not sanitize ANSI escape sequences in user inputEPSS 0.2%