github.com/runatlantis/atlantis/server/controllers/events vulnerabilities

1 known vulnerability in github.com/runatlantis/atlantis/server/controllers/events from Github.com/runatlantis/atlantis/server/controllers/events. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  github.com/runatlantis/atlantis/server/controll…: Observable Discrepancy

  CVE-2022-24912Jul 29, 2022Github.com/runatlantis/atlantis/server/controllers/eventsEPSS 1.21%

  The package github.com/runatlantis/atlantis/server/controllers/events before 0.19.7 are vulnerable to Timing Attack in the webhook event validator code, which does not use a constant-time comparison function to validate the webhook secret. It can allow an atta