GHSA-75r6-6jg8-pfcq
octo-sts vulnerable to unauthenticated attacker causing unbounded CPU and memory usage
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Go | github.com/octo-sts/app | < 0.1.0 | 0.1.0 |
Details
As written in the advisory (Markdown source, shown as plain text).
### Impact
This vulnerability can spike the resource utilization of the STS service, and combined with a significant traffic volume could potentially lead to a denial of service.
### Patches
This vulnerability existed in the repository at HEAD, we will cut a 0.1.0 release with the fix.
### Workarounds
None
### References
None
References
External links from the advisory. They lead to third-party sites.