Charm Vulnerabilities

Comprehensive security vulnerability database for Charm products

Last updated: Mar 7, 2026
Total CVEs

1

Critical

1

With Exploits

1

Last 30 Days

0

Severity Distribution

Critical1
100%
High0
0%
Medium0
0%
Low0
0%
DescriptionVendor / ProductExploit Status
CVE-2026-308329.1

This vulnerability allows an authenticated user to trick the Git server into making unauthorized HTTP requests to internal services by using a specially crafted URL. An attacker needs access to the server and can exploit this to gain read access to sensitive internal data by manipulating the server's response.

charmsoft serve
Exploit Available
about 1 month agoMar 7, 2026

About Charm Security

This page tracks all publicly disclosed security vulnerabilities (CVEs) affecting Charm products. Our database is updated in real-time from the National Vulnerability Database (NVD) and enriched with exploit information from GitHub and other security research sources.

Each CVE listing includes CVSS severity scores, exploit availability status, AI-powered vulnerability summaries, and links to official patches and security advisories.