gitingest vulnerabilities

2 known vulnerabilities in gitingest from Coderamp-labs. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  gitingest: Improper Link Resolution Before File Access

  CVE-2026-110767Oct 14, 2026Coderamp-labs

  Gitingest through 0.3.1 contains a symlink following vulnerability in ingest_query single-file blob ingestion that allows unauthenticated attackers to read server files by submitting symlink blob URLs. Attackers can commit a symlink to a public repository and

• 7.4 High severity

  gitingest: Server-Side Request Forgery

  CVE-2026-82289Aug 28, 2026Coderamp-labs

  Gitingest through 0.3.1 fails to properly validate hostnames in _validate_host, accepting any host with a git., gitlab., or github. prefix regardless of known-hosts list membership. Attackers can submit URLs with attacker-controlled hostnames to trigger outbou