org.webjars.npm:redoc@1.22.2 vulnerabilities

2.3.0

7 years ago

25 days ago

Direct Vulnerabilities

Known vulnerabilities in the org.webjars.npm:redoc package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Vulnerability	Vulnerable Version
H Prototype Pollution org.webjars.npm:redoc is an OpenAPI/Swagger-generated API Reference Documentation. Affected versions of this package are vulnerable to Prototype Pollution via the `mergeObjects()` method in `utils/helpers.ts` due to improper user input sanitization. How to fix Prototype Pollution? Upgrade `org.webjars.npm:redoc` to version 2.4.0 or higher.	[,2.4.0)
M Cross-site Scripting (XSS) org.webjars.npm:redoc is an OpenAPI/Swagger-generated API Reference Documentation. Affected versions of this package are vulnerable to Cross-site Scripting (XSS). `valueToHTML` in `src/utils/jsonToHtml.ts` does not sanitize provided URI values. How to fix Cross-site Scripting (XSS)? Upgrade `org.webjars.npm:redoc` to version 2.0.0-rc.28 or higher.	[,2.0.0-rc.28)