Vulnerability in Ossf Allstar

CVE-2025-61926

Allstar is a GitHub App to set and enforce security policies. In versions prior to 4.5, a vulnerability in Allstar’s Reviewbot component caused inbound webhook requests to be validated against a hard-coded, shared secret. The value used fo…

EPSS: 0.004 (29.2th percentile) — read the EPSS interpretation.

Affected products

  • Ossf Allstar — versions < 0.0.0-20250721181116-e004ecb540d6

Weakness classification (CWE)

References