Coderamp-labs vulnerabilities
We track 2 vulnerabilities in Coderamp-labs products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 14, 2026.
2vulnerabilities
0critical
2high
0exploited
7.5average CVSS score
Latest Coderamp-labs vulnerabilities
- 7.5 High severity
gitingest: Improper Link Resolution Before File Access
Gitingest through 0.3.1 contains a symlink following vulnerability in ingest_query single-file blob ingestion that allows unauthenticated attackers to read server files by submitting symlink blob URLs. Attackers can commit a symlink to a public repository and
- 7.4 High severity
gitingest: Server-Side Request Forgery
Gitingest through 0.3.1 fails to properly validate hostnames in _validate_host, accepting any host with a git., gitlab., or github. prefix regardless of known-hosts list membership. Attackers can submit URLs with attacker-controlled hostnames to trigger outbou