Skip to content
OpenAdvisories

Package · Go

knative.dev/eventing-github

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low —
    GHSA-v7hc-87jc-qrrr

    eventing-github vulnerable to denial of service caused by improper enforcement of the timeout on individual read operations

    ### Impact The eventing-github cluster-local server doesn't set `ReadHeaderTimeout`‬‭ which could lead do a DDoS‬ ‭attack, where a large group of users send requests to the server causing the server to hang‬ ‭for long enough to deny it from being available to…

    knative.dev/eventing-github Go