knative.dev/eventing-github vulnerabilities

Latest knative.dev/eventing-github CVEs

Newest publication first

1. GHSA-v7hc-87jc-qrrr eventing-github vulnerable to denial of service caused by improper enforcement of the timeout on individual read operations

   Published 2023-12-06

   Unknown

   Impact The eventing-github cluster-local server doesn't set ReadHeaderTimeout‬‭ which could lead do a DDoS‬ ‭attack, where a large group of users send requests to the server causing the server to hang‬ ‭for long enough to deny it from being available to other users, also know as...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.