{"action":"Upgrade @octokit/plugin-paginate-rest to 9.2.2 or later.","affected":[{"fixed":"11.4.1","introduced":"9.3.0-beta.1"},{"fixed":"9.2.2","introduced":"1.0.0"}],"component":"@octokit/plugin-paginate-rest","cve_ids":["CVE-2025-25288"],"ecosystem":"npm","epss":0.00628,"exploited":false,"fixed_versions":["11.4.1","9.2.2"],"ghsa_id":"GHSA-h5c3-5r3r-rr8q","id":"tcs_01M5KFT7AQKVHPVN5EMFD4757P","modified_at":"2026-09-10T03:50:22.670415754Z","published_at":"2025-02-14T17:57:59Z","references":["https://osv.dev/vulnerability/GHSA-h5c3-5r3r-rr8q","https://github.com/octokit/plugin-paginate-rest.js/security/advisories/GHSA-h5c3-5r3r-rr8q","https://nvd.nist.gov/vuln/detail/CVE-2025-25288","https://github.com/octokit/plugin-paginate-rest.js/commit/bb6c4f945d8023902cf387391d2b2209261044ab","https://github.com/octokit/plugin-paginate-rest.js","https://github.com/octokit/plugin-paginate-rest.js/blob/main/src/iterator.ts","https://github.com/octokit/plugin-paginate-rest.js/releases/tag/v9.2.2"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-h5c3-5r3r-rr8q","url":"https://osv.dev/vulnerability/GHSA-h5c3-5r3r-rr8q"}],"summary":"@octokit/plugin-paginate-rest has a Regular Expression in iterator Leads to ReDoS Vulnerability Due to Catastrophic Backtracking"}