CGA-c9f2-4r4w-h29v

Summary

octo-sts vulnerable to unauthenticated attacker causing unbounded CPU and memory usage

Description

Impact

This vulnerability can spike the resource utilization of the STS service, and combined with a significant traffic volume could potentially lead to a denial of service.

Patches

This vulnerability existed in the repository at HEAD, we will cut a 0.1.0 release with the fix.

Workarounds

None

References

None