This repository was archived by the owner on Sep 30, 2024. It is now read-only.

Security

Security Policy

Our security policy is documented at https://sourcegraph.com/security.

Arbitrary Command Execution in gitserver through customGitFetch feature
GHSA-4qhq-4x4h-fxm8 published Nov 22, 2022 by evict

Critical
Command Injection in gitserver
GHSA-pfm3-23mh-6xjp published Nov 22, 2022 by evict

High
Unauthorized overwriting of saved searches in Sourcegraph
GHSA-37qp-9jq6-f6mx published Jul 26, 2022 by ferozsalam

Moderate
Indirect Object Access in Sourcegraph Code Monitoring
GHSA-5866-hhq9-9hpc published Jul 26, 2022 by ferozsalam

High
Remote Code Execution in gitserver
GHSA-r2m9-hfg8-4c38 published May 3, 2022 by andreeleuterio

High
Side-channel attack in Sourcegraph Code Monitors
GHSA-xqv2-x6f2-w3pf published Feb 15, 2022 by andreeleuterio

High
Remote Code Execution in gitserver
GHSA-qcmp-fx72-q8q9 published Feb 18, 2022 by andreeleuterio

High
Side-channel attack in Sourcegraph
GHSA-cpq7-hmvv-29w9 published Dec 13, 2021 by andreeleuterio

High
Low risk information disclosure in Sourcegraph
GHSA-mq5p-477h-xgwv published Aug 2, 2021 by andreeleuterio

Low
Open redirect vulnerability
GHSA-mx43-r985-5h4m published Apr 30, 2020 by nicksnyder

High

Learn more about advisories related to sourcegraph/sourcegraph-public-snapshot in the GitHub Advisory Database