CVE-2025-52477
2 advisories.
Go/github.com/octo-sts/app CVE-2025-52477: high 8.6, EPSS 0.49%
Octo STS Unauthenticated SSRF by abusing fields in OpenID Connect tokens
Action: Upgrade github.com/octo-sts/app to 0.5.3 or later.
go get github.com/octo-sts/app@v0.5.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.5.3 | - |
Fixed versions
| 0.5.3 |
Sources
- osv: GHSA-h3qp-hwvr-9xcq
- https://github.com/octo-sts/app/security/advisories/GHSA-h3qp-hwvr-9xcq
- https://nvd.nist.gov/vuln/detail/CVE-2025-52477
- https://github.com/octo-sts/app/commit/0f177fde54f9318e33f0bba6abaea9463a7c3afd
- https://github.com/octo-sts/app/commit/b3976e39bd8c8c217c0670747d34a4499043da92
- https://github.com/octo-sts/app
CVE-2025-52477 · published · modified · JSON
Go/github.com/octo-sts/app CVE-2025-52477: unknown, EPSS 0.49%
Octo STS Unauthenticated SSRF by abusing fields in OpenID Connect tokens in github.com/octo-sts/app
Action: Upgrade github.com/octo-sts/app to 0.5.3 or later.
go get github.com/octo-sts/app@v0.5.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.5.3 | - |
Fixed versions
| 0.5.3 |
Sources
- osv: GO-2025-3779
- https://github.com/octo-sts/app/security/advisories/GHSA-h3qp-hwvr-9xcq
- https://nvd.nist.gov/vuln/detail/CVE-2025-52477
- https://github.com/octo-sts/app/commit/0f177fde54f9318e33f0bba6abaea9463a7c3afd
- https://github.com/octo-sts/app/commit/b3976e39bd8c8c217c0670747d34a4499043da92
CVE-2025-52477 · published · modified · JSON