app vulnerabilities

1 known vulnerability in app from Octo-sts. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.6 High severity

  app: Server-Side Request Forgery

  CVE-2025-52477Jun 26, 2025Octo-sts

  Octo-STS is a GitHub App that acts like a Security Token Service (STS) for the GitHub API. Octo-STS versions before v0.5.3 are vulnerable to unauthenticated SSRF by abusing fields in OpenID Connect tokens. Malicious tokens were shown to trigger internal networ