Prototype Pollution

apidoc-core is vulnerable to Prototype Pollution. The vulnerability is due to insufficient input validation in the preProcess function, which allows an attacker to supply a crafted payload and inject properties into the Object.prototype, potentially causing a denial of service DoS or unexpected...

EUVD-2025-31115

Malicious code in bioql PyPI...

CVE-2025-57317

CVE-2025-57317 affects apidoc-core (preProcess) up to version 0.15.0, enabling prototype pollution via crafted payloads and causing DoS. Remediation: upgrade to a version later than 0.15.0 (no fixed version stated); multiple sources cite this, including PT-2025-39384 and Red Hat advisories. PoCs ...