In affected versions of Octopus Deploy it is possible to perform a Regex Denial of Service via the package upload function.Referenceshttps://advisories.octopus.com/post/2022/sa2022-10/