tocsin

Go/github.com/octo-sts/app CVE-2024-34079: low 3.7, EPSS 0.58%

octo-sts vulnerable to unauthenticated attacker causing unbounded CPU and memory usage

Action: Upgrade github.com/octo-sts/app to 0.1.0 or later.

go get github.com/octo-sts/app@v0.1.0

Affected

introducedfixedlast affected
00.1.0-

Fixed versions

0.1.0

Sources

CVE-2024-34079 · published · modified · JSON