octo-sts app

• CVE-2026-105770 Medium 5.3 Octo STS discloses trust policy contents to unauthorized callers via Exchange error messages 0.3%
• CVE-2025-52477 High 8.6 Octo-STS Vulnerable to Unauthenticated SSRF with HTTP Response Reflection in OIDC Flow 0.5%
• CVE-2024-34079 Low 3.7 octo-sts allows unauthenticated attackers to cause unbounded CPU and memory usage 0.6%