Skip to content
Every CVE
Browse
Docs
Sources
Guide
Search
/
Get
API key
Every CVE
Packages
github.com/octo-sts/app
github.com/octo-sts/app vulnerabilities (Go)
2 vulnerabilities.
github.com/octo-sts/app
Go
Octo-STS Vulnerable to Unauthenticated SSRF with HTTP Response Reflection in OIDC Flow
CVE-2025-52477
Fix available
8.6
High
June 26, 2025
github.com/octo-sts/app
Go
octo-sts allows unauthenticated attackers to cause unbounded CPU and memory usage
CVE-2024-34079
Fix available
3.7
Low
May 10, 2024
esc
Pages
All vulnerabilities
Browse
Docs
Sources
Guide
Get API key
Move
Enter
Open