https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T02:52:47.582854+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-5442 EUVD-2026-5442 2026-10-07T02:52:47.631675+00:00 EUVD-2026-5442 https://cve.radiocsirt.org/vuln/fkie_cve-2024-34079 fkie_cve-2024-34079 2026-10-07T02:52:47.631714+00:00

octo-sts is a GitHub App that acts like a Security Token Service (STS) for the Github API. This vulnerability can spike the resource utilization of the STS service, and combined with a significant traffic volume could potentially lead to a denial of service. This vulnerability is fixed in 0.1.0

 https://cve.radiocsirt.org/vuln/ghsa-75r6-6jg8-pfcq GHSA-75r6-6jg8-pfcq — octo-sts vulnerable to unauthenticated attacker causing unbounded CPU and memory usage 2026-10-07T02:52:47.631754+00:00

Affected: Go: github.com/octo-sts/app

### Impact This vulnerability can spike the resource utilization of the STS service, and combined with a significant traffic volume could potentially lead to a denial of service.

### Patches This vulnerability existed in the repository at HEAD, we will cut a 0.1.0 release with the fix.

### Workarounds None

### References None