| Package | Affected versions | Patched versions |
|---|---|---|
| octobox | < 2021-11-02 | 2021-11-02 |
Octobox is software for managing GitHub notifications. Prior to pull request (PR) 2807, a user of the system can provide a specifically crafted search query string that will trigger a ReDoS vulnerability. This issue is fixed in PR 2807.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free