| Package | Affected versions | Patched versions |
|---|---|---|
| cf-deployment | < 13.15.0 | 13.15.0 |
| gorouter | < 0.206.0 | 0.206.0 |
Cloud Foundry Routing (Gorouter) versions prior to 0.206.0 allow a malicious developer with "cf push" access to cause denial-of-service to the CF cluster by pushing an app that returns specially crafted HTTP responses that crash the Gorouters.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free