Redoc vulnerabilities

2 known vulnerabilities in Redoc from Redocly. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Redoc: Improperly Controlled Modification of Object Prototype Attributes

  CVE-2024-57083Mar 28, 2025Redocly

  A prototype pollution in the component Module.mergeObjects (redoc/bundles/redoc.lib.js:2) of redoc <= 2.2.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted payload.

• 9.8 Critical severity

  redoc: Improperly Controlled Modification of Object Prototype Attributes

  CVE-2024-39011Jul 30, 2024Redocly

  Prototype Pollution in chargeover redoc v2.0.9-rc.69 allows attackers to execute arbitrary code or cause a Denial of Service (DoS) and cause other impacts via the function mergeObjects.