CVE-2025-25288
1 advisory.
npm/@octokit/plugin-paginate-rest CVE-2025-25288: medium 5.3, EPSS 0.63%
@octokit/plugin-paginate-rest has a Regular Expression in iterator Leads to ReDoS Vulnerability Due to Catastrophic Backtracking
Action: Upgrade @octokit/plugin-paginate-rest to 9.2.2 or later.
npm i @octokit/plugin-paginate-rest@11.4.1npm i @octokit/plugin-paginate-rest@9.2.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 9.3.0-beta.1 | 11.4.1 | - |
| 1.0.0 | 9.2.2 | - |
Fixed versions
| 11.4.1 | 9.2.2 |
Sources
- osv: GHSA-h5c3-5r3r-rr8q
- https://github.com/octokit/plugin-paginate-rest.js/security/advisories/GHSA-h5c3-5r3r-rr8q
- https://nvd.nist.gov/vuln/detail/CVE-2025-25288
- https://github.com/octokit/plugin-paginate-rest.js/commit/bb6c4f945d8023902cf387391d2b2209261044ab
- https://github.com/octokit/plugin-paginate-rest.js
- https://github.com/octokit/plugin-paginate-rest.js/blob/main/src/iterator.ts
- https://github.com/octokit/plugin-paginate-rest.js/releases/tag/v9.2.2
CVE-2025-25288 · published · modified · JSON