Octo-sts App

2 CVEs affecting Octo-sts App. Latest disclosed: 2025-06-26. Critical: 0, High: 1.

Top CVEs affecting Octo-sts App
CVESeverityScorePublishedSummary
CVE-2025-52477High8.62025-06-26Octo-STS is a GitHub App that acts like a Security Token Service (STS) for the GitHub API. Octo-STS versions before v0.5.3 are vulnerable to unauthenticated SS…
CVE-2024-34079Low3.72024-05-14octo-sts is a GitHub App that acts like a Security Token Service (STS) for the Github API. This vulnerability can spike the resource utilization of the STS ser…