📦 Atlantis

CVE-2024-52009 is a critical vulnerability in Atlantis that logs GitHub access tokens during rotation, exposing them to anyone with log read access. This allows attackers to impersonate Atlantis and p...

This vulnerability allows attackers to perform timing attacks against the webhook secret validation in Atlantis, potentially recovering the secret through statistical analysis of response times. Attac...