Vulnerability CVE-2024-34084


Published: 2024-05-07

Description:
Minder's `HandleGithubWebhook` is susceptible to a denial of service attack from an untrusted HTTP request. The vulnerability exists before the request has been validated, and as such the request is still untrusted at the point of failure. This allows an attacker with the ability to send requests to `HandleGithubWebhook` to crash the Minder controlplane and deny other users from using it. This vulnerability is fixed in 0.0.48.

 References:
https://github.com/stacklok/minder/security/advisories/GHSA-9c5w-9q3f-3hv7
https://github.com/stacklok/minder/commit/3e5a527d2f1b535159206161d1d519602c75bd0d

Copyright 2026, cxsecurity.com

 

Back to Top