Skip to content
OpenAdvisories

Package · Go

knative.dev/eventing-gitlab

1 known vulnerabilities.

1 result · Feed

  • Low —

    eventing-gitlab vulnerable to denial of service, caused by improper enforcement of the timeout on individual read operations

    ### Impact The eventing-gitlab cluster-local server doesn't set `ReadHeaderTimeout`‬‭ which could lead do a DDoS‬ ‭attack, where a large group of users send requests to the server causing the server to hang‬ ‭for long enough to deny it from being available to…