Build software better, together

Security Advisories

View known security vulnerabilities and report new vulnerabilities privately to maintainers.

Deletion of internal files allows remote command execution
GHSA-wj44-9vcg-wjq7 published Jun 24, 2025 by unknwon

Critical
Argument Injection when tagging new releases
GHSA-m27m-h5gj-wwmg published Dec 23, 2024 by unknwon

High
Argument Injection during changes preview
GHSA-9pp6-wq8c-3w2c published Dec 23, 2024 by unknwon

Critical
Deletion of internal files
GHSA-ccqv-43vm-4f3w published Dec 23, 2024 by unknwon

Critical
Argument Injection in the built-in SSH server
GHSA-vm62-9jw3-c8w3 published Dec 23, 2024 by unknwon

Critical
Path Traversal in file update API
GHSA-qf5v-rp47-55gg published Dec 23, 2024 by unknwon

Critical
Path Traversal in file editing UI
GHSA-r7j8-5h9c-f6fx published Dec 23, 2024 by unknwon

Critical
Stored XSS in PDF renderer
GHSA-xh32-cx6c-cp4v published Jun 24, 2025 by unknwon

Moderate
OS Command Injection in repo editor on case-insensitive file systems
GHSA-pfvh-p8qp-9ww9 published Feb 25, 2023 by unknwon

Critical
Stored XSS Assignee
GHSA-3ghq-jqx4-4c4f published Feb 25, 2023 by unknwon

Critical