What’s Vulnerable › Products

octokit endpoint.js vulnerabilities

1 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your octokit endpoint.js version is affected

Latest octokit endpoint.js vulnerabilities

• CVE-2025-25285 — @octokit/endpoint has a Regular Expression in parse that Leads to ReDoS Vulnerability Due to Catastrophic Backtracking (CVSS 5.3)