Log in Start free

octo-sts

Products

ProductCVEsExploitedLatest
app3–Nov 3, 2026

Exploited and recent CVEs

  • CVE-2026-105770 Medium 5.3 Octo STS discloses trust policy contents to unauthorized callers via Exchange error messages 0.3%
  • CVE-2025-52477 High 8.6 Octo-STS Vulnerable to Unauthenticated SSRF with HTTP Response Reflection in OIDC Flow 0.5%
  • CVE-2024-34079 Low 3.7 octo-sts allows unauthenticated attackers to cause unbounded CPU and memory usage 0.6%