high7.7
CVE-2024-57083
Redoc Prototype Pollution via `Module.mergeObjects` Component
Impact
A prototype pollution in the component Module.mergeObjects (redoc/bundles/redoc.lib.js:2) of redoc <= 2.2.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted payload.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | redoc | < 2.4.0 | 2.4.0 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Redocly | Redoc | through 2.2.0 |