CVE-2023-50728

Summary

CVE-2023-50728 affects the octokit/webhooks library in GitHub's webhook events toolset for Node.js, versions 9.26.0 through 9.26.2, 10.9.1, 11.1.1, and 12.0.3. This vulnerability stems from an error handling issue in @octokit/webhooks where the error can be undefined, leading to an uncaught exception that terminates the Node.js process. This issue has been resolved in subsequent releases of octokit/webhooks.js (9.26.3, 10.9.2, 11.1.2, and 12.0.4), app.js (14.02), octokit.js (3.1.2), and Protobot (12.3.3).

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.