Skip to content
CVE PROGRAM SOURCE RECORD0.0 None

CVE-2024-38526

pdoc embeds link to malicious CDN if math mode is enabled

Description

pdoc provides API Documentation for Python Projects. Documentation generated with `pdoc --math` linked to JavaScript files from polyfill.io. The polyfill.io CDN has been sold and now serves malicious code. This issue has been fixed in pdoc 14.5.1.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

mitmproxy pdoc

  • < 14.5.1affected

References