by @Smartkeyss
19 Jul 2024

polyfill.io in pdoc (CVE-2024-38526)

by @Smartkeyss
19 Jul 2024

polyfill.io in pdoc (CVE-2024-38526)

CVEs

7.2 High Severity

PoC video

Summary

CVE-2024-38526 is a high-risk vulnerability due to the presence of polyfill.io CDN in pdoc math. Polyfill.io was acquired by a Chinese company and it contains malicious code. Users are advised to update to the latest version and use reliable CDN. Developers are advised to stop using polyfill.io.

Description

users/photos/clsevlral8gef1hon15grbvup.jpg

@Smartkeyss

32 posts

I am just curious 😊 I use simple words to explain complicated things.

Total vcoins

88.9K

Comments (0)