Octokit
7 CVEs across 10 Octokit products. Browse Octokit vulnerabilities, severities, and proof-of-concept exploits.
Octokit products with known CVEs
Octokit CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2025-25290 | Medium | 5.3 | 2025-02-14 | @octokit/request sends parameterized requests to GitHub’s APIs with sensible defaults in browsers and Node. Starting in version 1.0.0 and prior to versions 9.2… |
CVE-2025-25289 | Medium | 5.3 | 2025-02-14 | @octokit/request-error is an error class for Octokit request errors. Starting in version 1.0.0 and prior to version 6.1.7, a Regular Expression Denial of Servi… |
CVE-2025-25288 | Medium | 5.3 | 2025-02-14 | @octokit/plugin-paginate-rest is the Octokit plugin to paginate REST API endpoint responses. For versions starting in 1.0.0 and prior to 11.4.1 of the npm pack… |
CVE-2025-25285 | Medium | 5.3 | 2025-02-14 | @octokit/endpoint turns REST API endpoints into generic request options. Starting in version 4.1.0 and prior to version 10.1.3, by crafting specific `options`… |
CVE-2023-50728 | Medium | 5.4 | 2023-12-15 | octokit/webhooks is a GitHub webhook events toolset for Node.js. Starting in 9.26.0 and prior to 9.26.3, 10.9.2, 11.1.2, and 12.0.4, there is a problem caused… |
CVE-2022-31072 | Low | 2.5 | 2022-06-15 | Octokit is a Ruby toolkit for the GitHub API. Versions 4.23.0 and 4.24.0 of the octokit gem were published containing world-writeable files. Specifically, the… |
CVE-2022-31071 | Low | 2.5 | 2022-06-15 | Octopoller is a micro gem for polling and retrying. Version 0.2.0 of the octopoller gem was published containing world-writeable files. Specifically, the gem w… |