otterdog vulnerabilities
1 known vulnerability in otterdog from Eclipse Foundation. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
1critical
0high
0exploited
9.5average CVSS score
Latest first
- 9.5 Critical severity
otterdog: Improper Neutralization of Directives in Dynamically Evaluated Code
The otterdog webapp evaluates a format-string built from the incoming GitHub webhook JSON body using Python's eval(). When the GITHUB_WEBHOOK_SECRET configuration value is unset or empty (the code default is None), the HMAC signature check is skipped entirely,