[ Vendor · 1 CVEs ]
octo-sts
CVEs affecting octo-sts published in the last 30 days, plus any octo-sts CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-105770 | 3 Nov 2026 | CVSS 5.3 | octo-sts appOcto STS (github.com/octo-sts/app) before 0.11.2 returns trust policy configuration to callers whose OIDC token does not satisfy that policy… |