Denial of service from maliciously configured Git repository in Minder
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- Required
- Attack complexity
- Low
- Impact type
- Denial of service
- Confidentiality · integrity · availability
- None · None · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA and GitHub. Impact type from CWE-400.
Summary
Minder is an open source Software Supply Chain Security Platform. Minder's Git provider is vulnerable to a denial of service from a maliciously configured GitHub repository. The Git provider clones users repositories using the `github.com/go-git/go-git/v5` library on lines `L55-L89`. The Git provider does the following on the lines `L56-L62`. First, it sets the `CloneOptions`, specifying the url, the depth etc. It then validates the options. It then sets up an in-memory filesystem, to which it clones and Finally, it clones the repository. The `(g *Git) Clone()` method is vulnerable to a DoS attack: A Minder user can instruct Minder to clone a large repository which will exhaust memory and crash the Minder server. The root cause of this vulnerability is a combination of the following conditions: 1. Users can control the Git URL which Minder clones, 2. Minder does not enforce a size limit to the repository, 3. Minder clones the entire repository into memory. This issue has been addressed in commit `7979b43` which has been included in release version v0.0.52. Users are advised to upgrade. There are no known workarounds for this vulnerability.
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| stacklok | minder | before 0.0.52 | 0.0.52 | Patch available | CNA |
| — | github.com/stacklok/minder (Go) | before 0.0.52 | 0.0.52 | Patch available | GHSA-hpcg-xjq5-g666 |
- minder Vendorstacklok Affected before 0.0.52 Fixed in 0.0.52 Patch available CNA
- github.com/stacklok/minder (Go) Vendor— Affected before 0.0.52 Fixed in 0.0.52 Patch available GHSA-hpcg-xjq5-g666
Remediation
- Fix · CNA minder (stacklok) Fixed in 0.0.52
- Fix · GHSA-hpcg-xjq5-g666 github.com/stacklok/minder (Go) Fixed in 0.0.52 Advisory →
Timeline
- 2026-10-02 Threatist record created from CVE-2024-37904
- 2026-10-03 Alias added: GHSA-hpcg-xjq5-g666
References
Other 6
- https://github.com/stacklok/minder/security/advisories/GHSA-hpcg-xjq5-g666
- https://github.com/stacklok/minder/commit/7979b43
- https://github.com/stacklok/minder/blob/85985445c8ac3e51f03372e99c7b2f08a6d274aa/internal/providers/git/git.go#L55-L89
- https://github.com/stacklok/minder/blob/85985445c8ac3e51f03372e99c7b2f08a6d274aa/internal/providers/git/git.go#L56-L62
- https://github.com/stacklok/minder/commit/35bab8f9a6025eea9e6e3cef6bd80707ac03d2a9
- https://github.com/stacklok/minder
More stacklok vulnerabilities
- TI-2026-41912 ToolHive: containerized MCP servers can reach host services via host.docker.internal, enabling lateral movement CVSS 3.1HIGH 8.8
- TI-2024-22541 Minder's Github Webhook Handler vulnerable to denial of service from un-validated requests CVSS 3.1HIGH 7.5
- TI-2026-41911 ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation) CVSS 3.1MEDIUM 4.7
- TI-2024-23307 Denial of service of Minder Server from maliciously crafted GitHub attestations CVSS 3.1MEDIUM 5.3
- TI-2024-23266 Stacklok Minder vulnerable to denial of service from maliciously crafted templates CVSS 3.1MEDIUM 5.3
- TI-2024-23259 Denial of service of Minder Server with attacker-controlled REST endpoint CVSS 3.1MEDIUM 5.3
Sources
- CVE-2024-37904 · CVE Program
- CVE-2024-37904 · NVD
- FIRST EPSS
- GHSA-hpcg-xjq5-g666 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences