CVE-2024-34079 — octo-sts allows unauthenticated attackers to cause unbounded CPU and memory usage
octo-sts is a GitHub App that acts like a Security Token Service (STS) for the Github API. This vulnerability can spike the resource utilization of the STS service, and combined…
Published: 2024-05-10 · CVSS: 3.7 · CVSS 3.1
octo-sts is a GitHub App that acts like a Security Token Service (STS) for the Github API. This vulnerability can spike the resource utilization of the STS service, and combined with a significant traffic volume could potentially lead to a denial of service. This vulnerability is fixed in 0.1.0
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7