Skip to content
OpenAdvisories

Package · Go

github.com/Luzifer/ots

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium 5.3
    GHSA-h5fq-653g-gxrm

    ots has a negative expire override that can bypass its secret retention policy

    ## Summary The `/api/create` endpoint accepted negative `expire` query values. For the memory storage backend, negative values were passed to secret creation as a negative duration and treated as no expiry, allowing callers to create secrets that persisted lo…

    github.com/Luzifer/ots Go