-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability stems from the HTTP server configuration in the start method of gitLabReceiveAdapter. The original code created an http.Server without setting ReadTimeout and ReadHeaderTimeout fields. The patched commit explicitly adds these timeout parameters to prevent slowloris attacks. Since this is the only code modification shown in the advisory and commit diff, and the server initialization is directly tied to the described vulnerability, we can conclusively identify this function as the vulnerable component.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| knative.dev/eventing-gitlab | go | <= 0.39.0 |