In affected versions of Octopus Deploy it is possible to perform a Regex Denial of Service using the Variable Project Template.
octopus octopus_server