CVE-2024-38526: Mitmproxy Pdoc

High severity, CVSS 7.2. EPSS: 3.8% chance of exploitation in the next 30 days.

pdoc provides API Documentation for Python Projects. Documentation generated with `pdoc --math` linked to JavaScript files from polyfill.io. The polyfill.io CDN has been sold and now serves malicious code. This issue has been fixed in pdoc 14.5.1.

Affected products

• Mitmproxy Pdoc: before 14.5.1 (fixed in 14.5.1)

Published 2024-06-26. Last modified 2026-06-17.