The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.
Severity: medium
Fingerprint: 2580fa947178c88602b1737db148c044b81b03713d63bb82370a65226ff8ecbf
[core] repositoryformatversion = 0 filemode = true bare = false logallrefupdates = true [remote "origin"] url = git@git.sr.ht:~averna/static fetch = +refs/heads/*:refs/remotes/origin/* [branch "mainline"] remote = origin merge = refs/heads/mainline
Open service 46.23.81.157:443 ยท static.averna.li
2026-01-23 11:09
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Access-Control-Request-Methods: GET, HEAD, OPTIONS
Content-Length: 898
Content-Security-Policy: default-src 'self' data: blob:; script-src 'self' 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; worker-src 'self' 'unsafe-eval' 'unsafe-inline' data: blob:; frame-src https:; img-src data: https:; media-src https:; object-src 'none'; sandbox allow-downloads allow-forms allow-modals allow-pointer-lock allow-popups allow-presentation allow-same-origin allow-scripts;
Content-Type: text/html; charset=utf-8
Last-Modified: Tue, 05 Aug 2025 09:44:23 GMT
Vary: Accept-Encoding
Date: Fri, 23 Jan 2026 11:09:08 GMT
Connection: close
Page title: Averna
<!DOCTYPE html><html lang="en-US" xml:lang="en-US">
<head>
<meta http-equiv="X-UA-Compatible" content="IE=edge">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<meta http-equiv="Content-Type" content="text/html;charset=utf-8" />
<link rel="shortcut icon" type="image/png" sizes="32x32" href="https://static.averna.li/favicon-32x32.png">
<link rel="stylesheet" href="https://static.averna.li/main.css">
<meta name="theme-color" content="#151515">
<meta name="msapplication-navbutton-color" content="#151515">
<meta name="apple-mobile-web-app-status-bar-style" content="black-translucent">
<title>Averna</title>
<meta name="author" content="Averna">
</head>
<body>
<div class="container center-viewport">
<div>
<img src="https://static.averna.li/images/logo.png" alt="Averna" class="center-img">
</div>
</div>
</body>
</html>