All products

github.com/octo-sts/app

Go · Package
2 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Octo STS Unauthenticated SSRF by abusing fields in OpenID Connect tokensCVE-2025-52477 · GHSA-H3QP-HWVR-9XCQVersion ranges need review. github.com/octo-sts/app Go High Fix reported
octo-sts vulnerable to unauthenticated attacker causing unbounded CPU and memory usageCVE-2024-34079 · GHSA-75R6-6JG8-PFCQVersion ranges need review. github.com/octo-sts/app Go Low Fix reported