In affected versions of Octopus Deploy it is possible to perform a Regex Denial of Service targeting the build information request validation.
octopus octopus_server