LOW3.7Go
GHSA-75r6-6jg8-pfcq· CVE-2024-34079, GO-2024-2833octo-sts vulnerable to unauthenticated attacker causing unbounded CPU and memory usage
Modified: 9/10/2026
package
Go/github.com/octo-sts/app
pkg:go/github.com/octo-sts/app
HIGH8.6Go
GHSA-h3qp-hwvr-9xcq· CVE-2025-52477, GO-2025-3779Octo STS Unauthenticated SSRF by abusing fields in OpenID Connect tokens
Modified: 9/10/2026
—Go
GO-2024-2833· CVE-2024-34079, GHSA-75r6-6jg8-pfcqDenial of service in github.com/octo-sts/app
Modified: 2/4/2026
—Go
GO-2025-3779· CVE-2025-52477, GHSA-h3qp-hwvr-9xcqOcto STS Unauthenticated SSRF by abusing fields in OpenID Connect tokens in github.com/octo-sts/app
Modified: 2/4/2026