CVE-2024-57083

A flaw was found in redoc. This vulnerability can allow an attacker to cause a Denial of Service DoS via supplying a crafted payload...

CVE-2024-57083

creationtimestamp| type| source ---|---|--- 2025-03-29 00:27:03+00:00| seen| https://t.me/cvedetector/21484...

@abios/abios-redoc-cli (>=0.12.4, <=0.15.0), @acmekit/acmekit-oas-cli (>=2.13.1, <=2.13.94) +53 more potentially affected by CVE-2024-57083 via redoc (>=2.0.0, <=2.2.0)

redoc NPM version =2.0.0, =0.12.4, =2.13.1, =2.13.1, =0.0.1, =1.0.0, =2.6.10, =1.0.0, =1.0.1, =1.18.2, =0.0.2, =0.1.4, =0.2.1, =9.0.0, =0.1.0, =0.5.0 and more Source cves: CVE-2024-57083 Source advisory: OSV:GHSA-9RHG-254W-FH9X...

CVE-2024-57083

CVE-2024-57083 describes a prototype pollution in the Redoc library, specifically the Module.mergeObjects function in redoc

CVE-2024-57083

A prototype pollution in the component Module.mergeObjects redoc/bundles/redoc.lib.js:2 of redoc = 2.2.0 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

CVE-2024-57083

A prototype pollution in the component Module.mergeObjects redoc/bundles/redoc.lib.js:2 of redoc = 2.2.0 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

com.jordi9:krat-pack-testlib (>=1.0.0, <=1.2.1), io.github.shuigedeng:taotao-boot-demo (>=2025.02, <=2025.12) +7 more potentially affected by CVE-2024-57083 via org.webjars:redoc (>=2.0.0, <=2.5.1)

org.webjars:redoc MAVEN version =2.0.0, =1.0.0, =2025.02, =2025.02, =2025.02, =5.0.0-beta.2, =3.3.3, =v6.3.0.0, =4.41.4.0, =5.47.0.0 Source cves: CVE-2024-57083 Source advisory: SNYK:JAVA-ORGWEBJARS-8664934...