Go/knative.dev/eventing-gitlab: low
eventing-gitlab vulnerable to denial of service, caused by improper enforcement of the timeout on individual read operations
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 0.39.0 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-99jv-8292-2hpm
- https://github.com/knative-extensions/eventing-gitlab/security/advisories/GHSA-99jv-8292-2hpm
- https://github.com/knative-extensions/eventing-gitlab/commit/463fcb36ac31cdac34eda0e900b64039d6d30b36
- https://github.com/knative-extensions/eventing-gitlab/commit/db76c668aa47890e7fe73c9df3135da292cfd9ec
- https://github.com/knative-extensions/eventing-gitlab
published · modified · JSON