charm vulnerabilities

1 known vulnerability in charm from Charmbracelet. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  charm: Server-Side Request Forgery

  CVE-2022-29180May 7, 2022Charmbracelet

  A vulnerability in which attackers could forge HTTP requests to manipulate the `charm` data directory to access or delete anything on the server. This has been patched and is available in release [v0.12.1](https://github.com/charmbracelet/charm/releases/tag/v0