Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2021-32848

Octobox ReDoS vulnerability

Description

Octobox is software for managing GitHub notifications. Prior to pull request (PR) 2807, a user of the system can provide a specifically crafted search query string that will trigger a ReDoS vulnerability. This issue is fixed in PR 2807.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

octobox octobox

  • 2807 to < 2807affected

References