TI-2025-18944 CVE-2025-25290 · GHSA-rmvr-2pp2-xj38
Regular expression denial of service in octokit request.js
Priority MEDIUM 63
@octokit/request sends parameterized requests to GitHub’s APIs with sensible defaults in browsers and Node.
octokit
Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
octokit records in CISA KEVNo octokit vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
7 records
TI-2025-18943 CVE-2025-25289 · GHSA-xx4v-prfh-6cgc
Regular expression denial of service in octokit request-error.js
Priority MEDIUM 63
@octokit/request-error is an error class for Octokit request errors.
TI-2025-18942 CVE-2025-25288 · GHSA-h5c3-5r3r-rr8q
Regular expression denial of service in octokit plugin-paginate-rest.js
Priority MEDIUM 63
@octokit/plugin-paginate-rest is the Octokit plugin to paginate REST API endpoint responses.
TI-2025-18939 CVE-2025-25285 · GHSA-x4c5-c7rf-jjgv
@octokit/endpoint has a Regular Expression in parse that Leads to ReDoS Vulnerability Due to Catastrophic Backtracking
Priority MEDIUM 63
@octokit/endpoint turns REST API endpoints into generic request options.
TI-2023-27674 CVE-2023-50728 · GHSA-pwfr-8pq7-x9qv
Unauthenticated Denial of Service in the octokit/webhooks library
Priority LOW 35
octokit/webhooks is a GitHub webhook events toolset for Node.js.
TI-2022-13116 CVE-2022-31072 · GHSA-g28x-pgr3-qqx6
Octokit gem published with world-writable files
Priority LOW 16
Octokit is a Ruby toolkit for the GitHub API.
TI-2022-13115 CVE-2022-31071 · GHSA-26qj-cr27-r5c4
Octopoller gem published with world-writable files
Priority LOW 15
Octopoller is a micro gem for polling and retrying.