Octokit

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-50728 Dec 15, 22:15 npm HIGH PATCH This Week

octokit/webhooks is a GitHub webhook events toolset for Node.js. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Node.js App Octokit Webhooks +1

NVD GitHub

CVSS 3.1

7.5

EPSS

0.7%

CVE-2022-31072 Jun 15, 23:15 Ruby LOW PATCH Monitor

Octokit is a Ruby toolkit for the GitHub API. Rated low severity (CVSS 3.3), this vulnerability is low attack complexity. This Incorrect Default Permissions vulnerability could allow attackers to access resources due to overly permissive default settings.

Privilege Escalation Octokit

NVD GitHub

CVSS 3.1

3.3

EPSS

0.3%

CVE-2023-50728 npm

EPSS 1% CVSS 7.5

HIGH PATCH This Week

Information Disclosure Node.js App +3

NVD GitHub

CVE-2022-31072 Ruby

EPSS 0% CVSS 3.3

LOW PATCH Monitor

Privilege Escalation Octokit

NVD GitHub