by @Smartkeyss
19 Jul 2024

polyfill.io in pdoc (CVE-2024-38526)

by @Smartkeyss
19 Jul 2024

polyfill.io in pdoc (CVE-2024-38526)

CVEs

7.2 High Severity

PoC video

Summary

CVE-2024-38526 is a high-risk vulnerability due to the presence of polyfill.io CDN in pdoc math. Polyfill.io was acquired by a Chinese company and it contains malicious code. Users are advised to update to the latest version and use reliable CDN. Developers are advised to stop using polyfill.io.

Description

users/photos/clsevlral8gef1hon15grbvup.jpg

@Smartkeyss

63 posts

I am just curious 😊 I use simple words to explain complicated things. discord: @rxs_s

Total vcoins

0

Social media links

Comments (0)