Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2025/02/14 5:57 p.m.22 views

@octokit/plugin-paginate-rest has a Regular Expression in iterator Leads to ReDoS Vulnerability Due to Catastrophic Backtracking

Summary For the npm package @octokit/plugin-paginate-rest, when calling octokit.paginate.iterator, a specially crafted octokit instance—particularly with a malicious link parameter in the headers section of the request—can trigger a ReDoS attack. Details The issue occurs at line 39 of iterator.ts...

5.3CVSS6.8AI score0.00615EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder