What’s Vulnerable › Products

octokit request.js vulnerabilities

1 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your octokit request.js version is affected

Latest octokit request.js vulnerabilities

• CVE-2025-25290 — @octokit/request has a Regular Expression in fetchWrapper that Leads to ReDoS Vulnerability Due to Catastrophic Backtracking (CVSS 5.3)