CVE-2024-57083: Redocly Redoc

High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days.

A prototype pollution in the component Module.mergeObjects (redoc/bundles/redoc.lib.js:2) of redoc <= 2.2.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted payload.

Affected products

• Redocly Redoc: up to and including 2.2.0

Published 2025-03-28. Last modified 2026-06-17.