44 matches found
ReDoc API Docs - Detect
ReDoc API documentation interface is available without authentication, potentially exposing information about the API endpoints. !/usr/bin/env python3 -- coding: utf-8 -- """ReDoc API documentation interface is available without authentication, potentially exposing information about .""" from...
FastAPI Docs Panel - Detect
FastAPI Docs panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """FastAPI Docs panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'FastAPI Docs Panel - Detect', 'description': 'FastAPI Doc...
io.javalin.community.openapi:javalin-redoc-plugin (>=5.0.0, <=5.2.0), io.javalin.community.openapi:openapi-test (>=5.0.0, <=5.0.1) +41 more potentially affected by CVE-2026-73643 via org.webjars.npm:js-yaml (>=3.1.0, <=4.3.2)
org.webjars.npm:js-yaml MAVEN version =3.1.0, =5.0.0, =5.0.0, =9.0.6, =2.0.0, =2.1.3, =0.1.3, =1.1.4, =2.1.0, =4.0.3 and more Source cves: CVE-2026-73643 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-18313071...
org.http4k:http4k-api-graphql (5.44.0.0), org.http4k:http4k-api-jsonrpc (5.44.0.0) +180 more potentially affected by unknown CVE via org.http4k:http4k-core (5.44.0.0)
org.http4k:http4k-core MAVEN version 5.44.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-api-graphql 5.44.0.0 - org.http4k:http4k-api-jsonrpc 5.44.0.0 - org.http4k:http4k-api-jsonsche...
org.http4k:http4k-api-graphql (5.42.0.0), org.http4k:http4k-api-jsonrpc (5.42.0.0) +178 more potentially affected by unknown CVE via org.http4k:http4k-core (5.42.0.0)
org.http4k:http4k-core MAVEN version 5.42.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-api-graphql 5.42.0.0 - org.http4k:http4k-api-jsonrpc 5.42.0.0 - org.http4k:http4k-api-jsonsche...
@abios/abios-redoc-cli (>=0.12.4, <=0.15.0), @adobe/gatsby-theme-aio (>=2.13.1, <=4.6.2-photoshop-redoc-3) +41 more potentially affected by unknown CVE via redoc (>=0.5.2, <=2.0.0-rc.8-1)
redoc NPM version =0.5.2, =0.12.4, =2.13.1, =1.0.0, =2.6.10, =1.0.1, =1.18.2, =0.0.2, =0.1.4, =0.1.0, =0.2.1, =9.0.0, =0.1.0, =4.1.1-patch, =21.0.1, =22.5.0 and more Source cves: unknown CVE Source advisory: MEND:WS-2020-0294...
WS-2020-0294
redoc before 2.0.0-rc.28 doesn't encode URLs in JSON objects...
GHSA-7WW3-XVF5-CXWM ciguard: Web UI is missing HTTP defence-in-depth headers
Summary ciguard's FastAPI Web UI src/ciguard/web/app.py does not set HTTP defence-in-depth headers. OWASP ZAP baseline scan flagged 11 alerts: missing Content-Security-Policy Medium, X-Frame-Options Medium, Sub-Resource-Integrity on /api/docs Medium, COOP / COEP / CORP Low, Permissions-Policy Low...
CVE-2024-39011
Prototype Pollution in chargeover redoc v2.0.9-rc.69 allows attackers to execute arbitrary code or cause a Denial of Service DoS and cause other impacts via the function mergeObjects...
Metasploit Wrap-Up 10/31/2025
New module content 3 ReDoc API Docs UI Exposed Author: Hamza Sahin Type: Auxiliary Pull request: 20594 contributed by HamzaSahin61 Path: scanner/http/redocexposed Description: Adds a module to detect publicly exposed ReDoc API documentation pages using read-only HTTP GET requests searching for...
ReDoc API Docs UI Exposed
Detects publicly exposed ReDoc API documentation pages. The module performs safe, read-only GET requests and reports likely ReDoc instances based on HTML markers. Module Options msf use auxiliary/scanner/http/redocexposed msf auxiliaryredocexposed show actions ...actions... msf...
EUVD-2024-54329
Malicious code in bioql PyPI...
Prototype Pollution
Redoc is vulnerable to Prototype Pollution. The vulnerability is due to improper handling of user-supplied input in the Module.mergeObjects component, allows attackers to manipulate the prototype chain and introduce malicious payloads, which can trigger a Denial of Service DoS...
CVE-2024-57083
A flaw was found in redoc. This vulnerability can allow an attacker to cause a Denial of Service DoS via supplying a crafted payload...
GHSA-9RHG-254W-FH9X Redoc Prototype Pollution via `Module.mergeObjects` Component
A prototype pollution in the component Module.mergeObjects redoc/bundles/redoc.lib.js:2 of redoc = 2.2.0 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...
Redoc Prototype Pollution via `Module.mergeObjects` Component
A prototype pollution in the component Module.mergeObjects redoc/bundles/redoc.lib.js:2 of redoc = 2.2.0 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...
@abios/abios-redoc-cli (>=0.12.4, <=0.15.0), @acmekit/acmekit-oas-cli (>=2.13.1, <=2.13.94) +54 more potentially affected by CVE-2024-57083 via redoc (>=2.0.0-alpha.5, <=2.2.0)
redoc NPM version =2.0.0-alpha.5, =0.12.4, =2.13.1, =2.13.1, =0.0.1, =1.0.0, =2.6.10, =1.0.0, =1.0.1, =1.18.2, =0.0.2, =0.1.4, =0.2.1, =9.0.0, =0.1.0, =0.5.0 and more Source cves: CVE-2024-57083 Source advisory: GHSA-9RHG-254W-FH9X...
@abios/abios-redoc-cli (>=0.12.4, <=0.15.0), @acmekit/acmekit-oas-cli (>=2.13.1, <=2.13.94) +54 more potentially affected by CVE-2024-57083 via redoc (>=2.0.0-alpha.5, <=2.2.0)
redoc NPM version =2.0.0-alpha.5, =0.12.4, =2.13.1, =2.13.1, =0.0.1, =1.0.0, =2.6.10, =1.0.0, =1.0.1, =1.18.2, =0.0.2, =0.1.4, =0.2.1, =9.0.0, =0.1.0, =0.5.0 and more Source cves: CVE-2024-57083 Source advisory: OSV:GHSA-9RHG-254W-FH9X...
