octokit vulnerabilities

CVEs per yearBy the year they were published

1. 20222
2. 20231
3. 20254

Newest CVEs

• CVE-2025-25290

  @octokit/request has a Regular Expression in fetchWrapper that Leads to ReDoS Vulnerability Due to Catastrophic Backtracking

  octokit · request.js

  Medium5.3
• CVE-2025-25289

  @octokit/request-error has a Regular Expression in index that Leads to ReDoS Vulnerability Due to Catastrophic Backtracking

  octokit · request-error.js

  Medium5.3
• CVE-2025-25288

  @octokit/plugin-paginate-rest has a Regular Expression in iterator that Leads to ReDoS Vulnerability Due to Catastrophic Backtracking

  octokit · plugin-paginate-rest.js

  Medium5.3
• CVE-2025-25285

  @octokit/endpoint has a Regular Expression in parse that Leads to ReDoS Vulnerability Due to Catastrophic Backtracking

  octokit · endpoint.js

  Medium5.3
• CVE-2023-50728

  Unauthenticated Denial of Service in the octokit/webhooks library

  octokit · webhooks.js

  Medium5.4
• CVE-2022-31071

  Octopoller gem published with world-writable files

  octokit · octopoller.rb

  Low2.5
• CVE-2022-31072

  Octokit gem published with world-writable files

  octokit · octokit.rb

  Low2.5