36 matches found
Prototype Pollution
Overview org.webjars.bower:redoc is an OpenAPI/Swagger-generated API Reference Documentation. Affected versions of this package are vulnerable to Prototype Pollution via the mergeObjects method in utils/helpers.ts due to improper user input sanitization. PoC js async = const lib = await...
Prototype Pollution
Overview org.webjars.npm:redoc is an OpenAPI/Swagger-generated API Reference Documentation. Affected versions of this package are vulnerable to Prototype Pollution via the mergeObjects method in utils/helpers.ts due to improper user input sanitization. PoC js async = const lib = await...
com.jordi9:krat-pack-testlib (>=1.0.0, <=1.3.0), io.github.shuigedeng:taotao-boot-demo (>=2025.02, <=2025.12) +7 more potentially affected by CVE-2024-57083 via org.webjars:redoc (>=2.0.0, <=2.5.1)
org.webjars:redoc MAVEN version =2.0.0, =1.0.0, =2025.02, =2025.02, =2025.02, =5.0.0-beta.2, =3.3.3, =v6.3.0.0, =4.41.4.0, =5.47.0.0 Source cves: CVE-2024-57083 Source advisory: SNYK:JAVA-ORGWEBJARS-8664934...
Prototype Pollution
Overview org.webjars:redoc is an OpenAPI/Swagger-generated API Reference Documentation. Affected versions of this package are vulnerable to Prototype Pollution via the mergeObjects method in utils/helpers.ts due to improper user input sanitization. PoC js async = const lib = await import'redoc';...
CVE-2024-39011
Prototype Pollution in chargeover redoc v2.0.9-rc.69 allows attackers to execute arbitrary code or cause a Denial of Service DoS and cause other impacts via the function mergeObjects...
CVE-2024-39011
Prototype Pollution in chargeover redoc v2.0.9-rc.69 allows attackers to execute arbitrary code or cause a Denial of Service DoS and cause other impacts via the function mergeObjects...
CVE-2024-39011
CVE-2024-39011 : Multiple sources identify a prototype pollution vulnerability in the ChargeOver Redoc package, version 2.0.9-rc.69 , exploitable via the function mergeObjects . Public descriptions attribute potential for arbitrary code execution and Denial of Service (DoS) , with impacts on conf...
Redoc 安全漏洞
Redoc is an open source tool from Redocly Open Source. It is used to generate documentation from OpenAPI definitions. A security vulnerability exists in Redoc version v2.0.9-rc.69. An attacker could exploit this vulnerability to execute arbitrary code or cause a denial of service denial of servic...
CVE-2024-39011
Prototype Pollution in chargeover redoc v2.0.9-rc.69 allows attackers to execute arbitrary code or cause a Denial of Service DoS and cause other impacts via the function mergeObjects...
CVE-2024-39011: Improperly Controlled Modification of Object Prototype Attributes
Prototype Pollution in chargeover redoc v2.0.9-rc.69 allows attackers to execute arbitrary code or cause a Denial of Service DoS and cause other impacts via the function mergeObjects...
CVE-2024-39011
Prototype Pollution in chargeover redoc v2.0.9-rc.69 allows attackers to execute arbitrary code or cause a Denial of Service DoS and cause other impacts via the function mergeObjects...
CVE-2024-39011
Prototype Pollution in chargeover redoc v2.0.9-rc.69 allows attackers to execute arbitrary code or cause a Denial of Service DoS and cause other impacts via the function mergeObjects...
PT-2024-28321
Name of the Vulnerable Software and Affected Versions chargeover redoc version 2.0.9-rc.69 Description The issue allows attackers to execute arbitrary code or cause a Denial of Service DoS and have other impacts via the mergeObjects function. Recommendations For chargeover redoc version...
Malicious code in Be.Vlaandеren.Basisregisters.AspNetCore.Swaggеr.ReDoc (NuGet)
--- -= Per source details. Do not edit below this line.=-...
