CVE-2024-39011: Chargeover Chargeover/redoc

Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days.

Prototype Pollution in chargeover redoc v2.0.9-rc.69 allows attackers to execute arbitrary code or cause a Denial of Service (DoS) and cause other impacts via the function mergeObjects.

Affected products

• Chargeover Chargeover/redoc: version 2.0.9 only

Published 2024-07-30. Last modified 2026-06-17.