CVE-2025-15414

creationtimestamp| type| source ---|---|--- 2026-01-01 21:42:06+00:00| seen| https://bsky.app/profile/potato.software/post/3mbfdvf3ia523 2026-01-01 22:33:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mbfgrcqpc72q 2026-01-02 02:25:32+00:00| seen|...

CVE-2025-15414

A flaw has been found in go-sonic sonic up to 1.1.4. The affected element is the function FetchTheme of the file service/theme/gitfetcher.go of the component Theme Fetching API. Executing a manipulation of the argument uri can lead to server-side request forgery. The attack may be launched...

CVE-2025-15414 go-sonic Theme Fetching API git_fetcher.go FetchTheme server-side request forgery

A flaw has been found in go-sonic sonic up to 1.1.4. The affected element is the function FetchTheme of the file service/theme/gitfetcher.go of the component Theme Fetching API. Executing a manipulation of the argument uri can lead to server-side request forgery. The attack may be launched...