GO-2026-5413 ots has a negative expire override that can bypass its secret retention policy in github.com/Luzifer/ots

ots has a negative expire override that can bypass its secret retention policy in github.com/Luzifer/ots...

ots has a negative expire override that can bypass its secret retention policy

Summary The /api/create endpoint accepted negative expire query values. For the memory storage backend, negative values were passed to secret creation as a negative duration and treated as no expiry, allowing callers to create secrets that persisted longer than intended. Impact Unauthenticated...

PT-2026-41410

Summary The /api/create endpoint accepted negative expire query values. For the memory storage backend, negative values were passed to secret creation as a negative duration and treated as no expiry, allowing callers to create secrets that persisted longer than intended. Impact Unauthenticated...