Description
A prototype pollution in the component Module.mergeObjects (redoc/bundles/redoc.lib.js:2) of redoc <= 2.2.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted payload.
Recommendation
Update the redoc package to the latest compatible version. Followings are version details:
- Affected version(s): < 2.4.0
- Patched version(s): 2.4.0
References
Could your website be exposed too?
SmartScanner can check your website for Redoc Prototype Pollution via `Module.mergeObjects` Component and gives you actionable findings to investigate.
Start a free scanRelated Issues
- akbr patch-into was discovered to contain a prototype pollution via the function patchInto - CVE-2024-38991
- depath and cool-path vulnerable to Prototype Pollution via `set()` Method - depath - CVE-2024-38985
- adolph_dudu ratio-swiper was discovered to contain a prototype pollution via the function extendDefaults - CVE-2024-38997
- depath and cool-path vulnerable to Prototype Pollution via `set()` Method - CVE-2024-38985
You might also like:
See something that needs correcting? Let us knowUpdated March 31, 2025