CVE-2021-32848

Octobox (GitHub notifications manager) contains a ReDoS vulnerability triggered by a crafted search query, pre-PR 2807. Root cause: inefficient parsing in the search parser that can be abused by specially formed queries. Impact: availability impact according to CVSS, fixed in pull request 2807. R...

CVE-2021-32848 Octobox ReDoS vulnerability

Octobox is software for managing GitHub notifications. Prior to pull request PR 2807, a user of the system can provide a specifically crafted search query string that will trigger a ReDoS vulnerability. This issue is fixed in PR 2807...