Skip to content
OpenAdvisories

Archive

6 December 2023

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • Low —

    eventing-github vulnerable to denial of service caused by improper enforcement of the timeout on individual read operations

    ### Impact The eventing-github cluster-local server doesn't set `ReadHeaderTimeout`‬‭ which could lead do a DDoS‬ ‭attack, where a large group of users send requests to the server causing the server to hang‬ ‭for long enough to deny it from being available to…