| Package | Affected versions | Patched versions |
|---|---|---|
| octopus server | ≥ 0.9, ≤ 0.9.620.4≥ 1.0, ≤ 1.6.3.1723≥ 2.0, ≤ 2.6.5≥ 2018.1.0, ≤ 2018.12.1≥ 2019.1.0, ≤ 2019.13.7≥ 2020.1.0, ≤ 2020.6.5449≥ 2021.1.6959, ≤ 2021.3.13021≥ 2022.1.0, < 2022.1.2894≥ 2022.2.6729, < 2022.2.6872≥ 2022.3.348, < 2022.3.4953≥ 3.0.0, ≤ 3.17.14≥ 4.0.4, ≤ 4.1.10 | 2022.1.28942022.2.68722022.3.4953 |
In affected versions of Octopus Deploy it is possible to perform a Regex Denial of Service via the package upload function.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free