Denial of service of Minder Server from maliciously crafted GitHub attestations
Modified: 9/10/2026
package
pkg:go/github.com/stacklok/minder
Denial of service of Minder Server from maliciously crafted GitHub attestations
Modified: 9/10/2026
Minder's GitHub Webhook Handler vulnerable to DoS from un-validated requests
Modified: 9/10/2026
Stacklok Minder vulnerable to denial of service from maliciously crafted templates
Modified: 9/10/2026
Denial of service of Minder Server with attacker-controlled REST endpoint
Modified: 9/10/2026
Minder GetRepositoryByName data leak
Modified: 9/10/2026
Minder affected by denial of service from maliciously configured Git repository
Modified: 9/10/2026
Minder trusts client-provided mapping from repo name to upstream ID
Modified: 9/10/2026
`GetRepositoryByName`, `DeleteRepositoryByName` and `GetArtifactByName` allow access of arbitrary repositories in Minder by any authenticated user
Modified: 2/3/2026
Minder trusts client-provided mapping from repo name to upstream ID in github.com/stacklok/minder
Modified: 7/9/2024
Minder access control bypass in github.com/stacklok/minder
Modified: 5/20/2024
Minder GetRepositoryByName data leak in github.com/stacklok/minder
Modified: 3/3/2026
Denial of Service from untrusted requests in github.com/stacklok/minder
Modified: 5/20/2024
Denial of service of Minder Server with attacker-controlled REST endpoint in github.com/stacklok/minder
Modified: 3/3/2026
Stacklok Minder vulnerable to denial of service from maliciously crafted templates in github.com/stacklok/minder
Modified: 3/3/2026
Denial of service of Minder Server from maliciously crafted GitHub attestations in github.com/stacklok/minder
Modified: 3/3/2026
Minder affected by denial of service from maliciously configured Git repository in github.com/stacklok/minder
Modified: 3/3/2026