low3.7
CVE-2024-34079
octo-sts vulnerable to unauthenticated attacker causing unbounded CPU and memory usage
Impact
### Impact This vulnerability can spike the resource utilization of the STS service, and combined with a significant traffic volume could potentially lead to a denial of service. ### Patches This vulnerability existed in the repository at HEAD, we will cut a 0.1.0 release with the fix. ### Workarounds None ### References None
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| go | github.com/octo-sts/app | < 0.1.0 | 0.1.0 |