Search results

Smart HTTP clones are much slower due to tiny flushes and gzip

Status: Open.

#912 In charmbracelet/soft-serve;

· akhilles opened on Jul 24, 2026

Custom global pre-receive hook's exit code is discarded, so it can never reject a push

Status: Open.

#909 In charmbracelet/soft-serve;

· mpaupulaire4 opened on Jul 23, 2026

Collab user with read-write can delete the whole repository

Status: Open.

#896 In charmbracelet/soft-serve;

· helmut72 opened on Jun 4, 2026

soft serve doesn't reap child git processes, causing zombie accumulation

Status: Open.

#891 In charmbracelet/soft-serve;

· eznix86 opened on May 24, 2026

Why is the Dockerfile not building the package first?

Status: Open.

#882 In charmbracelet/soft-serve;

· jon-zuka opened on Apr 29, 2026

Regression: cannot create webhooks targeting internal services after SSRF fix

Status: Open.

#880 In charmbracelet/soft-serve;

· tandiljuan opened on Apr 28, 2026

security: prioritized remediation plan - plaintext passwords, SQL injection, path traversal

Status: Open.

#865 In charmbracelet/soft-serve;

· dvrd opened on Mar 29, 2026

fix: comprehensive security and correctness fixes - round 59

Status: Open.

#863 In charmbracelet/soft-serve;

· dvrd opened on Mar 29, 2026

security(web): path traversal vulnerability and missing input validation

Status: Open.

#862 In charmbracelet/soft-serve;

· dvrd opened on Mar 29, 2026

fix(web): path traversal, JWT token expiration handling, input validation - round 58

Status: Open.

#860 In charmbracelet/soft-serve;

· dvrd opened on Mar 29, 2026

fix: review round 57 - findings already fixed in previous rounds

Status: Open.

#858 In charmbracelet/soft-serve;

· dvrd opened on Mar 29, 2026

fix(web): JWT claims missing validation - round 56

Status: Open.

#856 In charmbracelet/soft-serve;

· dvrd opened on Mar 29, 2026