See how gitingest compares to other vendors in security performance
Gitingest through 0.3.1 contains a symlink following vulnerability in ingestquery single-file blob ingestion that allows unauthenticated attackers to read server files by submitting symlink blob URLs. Attackers can commit a symlink to a public repository and submit its blob URL, causing the server to return any file the service user can read, up to 10 MB.
gitingest before 9996a06 mishandles symbolic links that point outside of the base directory.