octokit

Products

ProductCVEsExploitedLatest
endpoint.js1–Feb 14, 2025
octokit.rb1–Jun 15, 2022
octopoller.rb1–Jun 15, 2022
plugin-paginate-rest.js1–Feb 14, 2025
request-error.js1–Feb 14, 2025
request.js1–Feb 14, 2025
webhooks.js1–Dec 15, 2023

Exploited and recent CVEs

  • CVE-2025-25290 Medium 5.3 @octokit/request has a Regular Expression in fetchWrapper that Leads to ReDoS Vulnerability Due to Catastrophic Backtracking 0.8%
  • CVE-2025-25289 Medium 5.3 @octokit/request-error has a Regular Expression in index that Leads to ReDoS Vulnerability Due to Catastrophic Backtracking 0.6%
  • CVE-2025-25288 Medium 5.3 @octokit/plugin-paginate-rest has a Regular Expression in iterator that Leads to ReDoS Vulnerability Due to Catastrophic Backtracking 0.6%
  • CVE-2025-25285 Medium 5.3 @octokit/endpoint has a Regular Expression in parse that Leads to ReDoS Vulnerability Due to Catastrophic Backtracking 0.6%
  • CVE-2023-50728 Medium 5.4 Unauthenticated Denial of Service in the octokit/webhooks library 0.9%
  • CVE-2022-31071 Low 2.5 Octopoller gem published with world-writable files 0.2%
  • CVE-2022-31072 Low 2.5 Octokit gem published with world-writable files 0.3%