CVE-2021-32848: Octobox Project Octobox

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

Octobox is software for managing GitHub notifications. Prior to pull request (PR) 2807, a user of the system can provide a specifically crafted search query string that will trigger a ReDoS vulnerability. This issue is fixed in PR 2807.

Affected products

• Octobox Project Octobox: before 2021-11-02 (fixed in 2021-11-02)

Published 2023-02-20. Last modified 2026-06-17.