Skip to content
Octokit vulnerabilities
Newest
-
octokit request.js
@octokit/request has a Regular Expression in fetchWrapper that Leads to ReDoS Vulnerability Due to Catastrophic Backtracking
CVE-2025-25290
Fix available
5.3 Medium
-
octokit request-error.js
@octokit/request-error has a Regular Expression in index that Leads to ReDoS Vulnerability Due to Catastrophic Backtracking
CVE-2025-25289
Fix available
5.3 Medium
-
octokit plugin-paginate-rest.js
@octokit/plugin-paginate-rest has a Regular Expression in iterator that Leads to ReDoS Vulnerability Due to Catastrophic Backtracking
CVE-2025-25288
Fix available
5.3 Medium
-
octokit endpoint.js
@octokit/endpoint has a Regular Expression in parse that Leads to ReDoS Vulnerability Due to Catastrophic Backtracking
CVE-2025-25285
Fix available
5.3 Medium
-
octokit app, octokit, octokit webhooks +2 more +4 more
Unauthenticated Denial of Service in the octokit/webhooks library
CVE-2023-50728
Fix available
5.4 Medium
-
octokit project octokit, octokit octokit.rb +1 more
Octokit gem published with world-writable files
CVE-2022-31072
Fix available
2.5 Low
-
octopoller project octopoller, octokit octopoller.rb +1 more
Octopoller gem published with world-writable files
CVE-2022-31071
Fix available
2.5 Low