Search vulnerabilities

Results 1

CVE-2021-32848

Octobox ReDoS vulnerability

Octobox is software for managing GitHub notifications. Prior to pull request (PR) 2807, a user of the system can provide a specifically crafted search query string that will trigger a ReDoS vulnerability. This issue is fixed in PR 2807.

CVSS 3.1 · 7.5 High EPSS 1.0% KEV · Not listed
Vendors
Products