Description
Octobox is software for managing GitHub notifications. Prior to pull request (PR) 2807, a user of the system can provide a specifically crafted search query string that will trigger a ReDoS vulnerability. This issue is fixed in PR 2807.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| octobox | octobox | 2807 – < 2807 | 2807 |