CVE-2026-110767

The Gitingest tool, versions through 0.3.1 , is vulnerable to an arbitrary file read via a symlink following flaw in the ingest_query single-file blob ingestion component. An unauthenticated attacker can exploit this by submitting a blob URL pointing to a symlink committed in a public repository....

EUVD-2026-101567

Gitingest through 0.3.1 contains a symlink following vulnerability in ingestquery single-file blob ingestion that allows unauthenticated attackers to read server files by submitting symlink blob URLs. Attackers can commit a symlink to a public repository and submit its blob URL, causing the serve...