Luzifer github.com/Luzifer/ots vulnerabilities

Latest Luzifer github.com/Luzifer/ots CVEs

Newest publication first

1. GHSA-h5fq-653g-gxrm ots has a negative expire override that can bypass its secret retention policy

   Published 2026-05-05

   Medium·CVSS 5.3

   Summary The /api/create endpoint accepted negative expire query values. For the memory storage backend, negative values were passed to secret creation as a negative duration and treated as no expiry, allowing callers to create secrets that persisted longer than intended. Impact U...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.