CVE-2024-38526 — pdoc embeds link to malicious CDN if math mode is enabled
pdoc provides API Documentation for Python Projects. Documentation generated with `pdoc --math` linked to JavaScript files from polyfill.io. The polyfill.io CDN has been sold an…
Published: 2024-06-25 · CVSS: 0.0 · CVSS 3.1
pdoc provides API Documentation for Python Projects. Documentation generated with `pdoc --math` linked to JavaScript files from polyfill.io. The polyfill.io CDN has been sold and now serves malicious code. This issue has been fixed in pdoc 14.5.1.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7