GHSA-J4JW-M6XR-FV6C Soft Serve vulnerable to path traversal attacks
Impact Path traversal attack gives access to existing non-admin users to access and take over other user's repositories. A malicious user then can modify, delete, and arbitrarily repositories as if they were an admin user without explicitly giving them permissions. Patches This is patched in v0.8...