Skip to content
OpenAdvisories

Vendor

octokit

7 known vulnerabilities.

Products

octokit.rb 1 plugin-paginate-rest.js 1 octopoller.rb 1 request-error.js 1 endpoint.js 1 webhooks.js 1 request.js 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 2.5
    CVE-2022-31071

    Octopoller gem published with world-writable files

    Octopoller is a micro gem for polling and retrying. Version 0.2.0 of the octopoller gem was published containing world-writeable files. Specifically, the gem was packed with files having their permissions set to `-rw-rw-rw-` (i.e. 0666) instead of `rw-r--r--`…

    octokit octopoller.rb octopoller RubyGems
  • Low 2.5
    CVE-2022-31072

    Octokit gem published with world-writable files

    Octokit is a Ruby toolkit for the GitHub API. Versions 4.23.0 and 4.24.0 of the octokit gem were published containing world-writeable files. Specifically, the gem was packed with files having their permissions set to `-rw-rw-rw-` (i.e. 0666) instead of `rw-r-…

    octokit octokit.rb octokit ruby-octokit Ubuntu RubyGems