GHSA-75r6-6jg8-pfcqLowCVSS 3.7

octo-sts vulnerable to unauthenticated attacker causing unbounded CPU and memory usage

Published
May 13, 2024
Last Modified
July 5, 2024

🔗 CVE IDs covered (1)

CVE-2024-34079 →

📋 Description

Impact

This vulnerability can spike the resource utilization of the STS service, and combined with a significant traffic volume could potentially lead to a denial of service.

Patches

This vulnerability existed in the repository at HEAD, we will cut a 0.1.0 release with the fix.

Workarounds

None

References

None

🎯 Affected products1

  • go/github.com/octo-sts/app:< 0.1.0

🔗 References (4)