mitmproxy pdoc vulnerabilities

Latest mitmproxy pdoc CVEs

Newest publication first

1. CVE-2024-38526 pdoc embeds link to malicious CDN if math mode is enabled

   Published 2024-06-25

   None·CVSS 0.0 EPSS 3.8%

   pdoc provides API Documentation for Python Projects. Documentation generated with pdoc --math linked to JavaScript files from polyfill.io. The polyfill.io CDN has been sold and now serves malicious code. This issue has been fixed in pdoc 14.5.1.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.