GHSA-6vj3-p34w-xxjp
apidoc-core has a prototype pollution vulnerability
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | apidoc-core | >= 0.2.0, <= 0.15.0 | no fix listed |
Details
As written in the advisory (Markdown source, shown as plain text).
Prototype pollution vulnerability in apidoc-core versions 0.2.0 and all subsequent versions allows remote attackers to modify JavaScript object prototypes via malformed data structures, including the “define” property processed by the application, potentially leading to denial of service or unintended behavior in applications relying on the integrity of prototype chains. This affects the preProcess() function in api_group.js, api_param_title.js, api_use.js, and api_permission.js worker modules.
References
External links from the advisory. They lead to third-party sites.