In affected versions of Octopus Deploy it is possible to perform a Regex Denial of Service via the package upload function.
octopus octopus_server