~ / search / GHSA-9rhg-254w-fh9x

GHSA-9rhg-254w-fh9x

Redoc Prototype Pollution via `Module.mergeObjects` Component

Source: GitHub Advisory Database (reviewed) High CVE-2024-57083

Packages

EcosystemPackageAffectedFixed in
npm redoc < 2.4.0 2.4.0

Details

As written in the advisory (Markdown source, shown as plain text).

A prototype pollution in the component Module.mergeObjects (redoc/bundles/redoc.lib.js:2) of redoc <= 2.2.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted payload.

References

External links from the advisory. They lead to third-party sites.