CVE-2025-57317

apidoc-core is the core parser library to generate apidoc result following the apidoc-spec. A Prototype Pollution vulnerability in the preProcess function of apidoc-core versions thru 0.15.0 allows attackers to inject properties on Object.prototype via supplying a crafted payload, causing denial ...

CVE-2025-57317

The apidoc-core library, used to generate results following the apidoc-spec, is vulnerable to a Prototype Pollution flaw in its preProcess function. This issue affects versions through 0.15.0 (specifically noted as >=0.2.2,

PT-2025-39384

Name of the Vulnerable Software and Affected Versions apidoc-core versions through 0.15.0 Description apidoc-core is the core parser library used to generate apidoc results based on the apidoc-spec. A flaw exists in the preProcess function that allows for prototype pollution. By providing a...

CVE-2025-57317: Uncontrolled Resource Consumption

apidoc-core is the core parser library to generate apidoc result following the apidoc-spec. A Prototype Pollution vulnerability in the preProcess function of apidoc-core versions thru 0.15.0 allows attackers to inject properties on Object.prototype via supplying a crafted payload, causing denial ...

apidoc-core 安全漏洞

apidoc-core is an open source parser library from apiDoc. A security vulnerability exists in apidoc-core 0.15.0 and earlier versions, which stems from prototype contamination in the preProcess function, which allows an attacker to inject attributes via a specially crafted payload, potentially...

Inefficient Regular Expression Complexity in apidoc/apidoc-core

✍️ Description A ReDoS regular expression denial of service flaw was found in the apidoc-core package. An attacker that is able to provide crafted input to the trim function may cause an application to consume an excessive amount of CPU. Similar attack ref:...