Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

5 records

Vendor: Mintlify Component: Mintlify Clear all filters
TI-2025-41485 CVE-2025-67846 · GHSA-767x-95qw-8v6j

The Deployment Infrastructure in Mintlify Platform before 2025-11-15 allows remote…

Priority MEDIUM 62

The Deployment Infrastructure in Mintlify Platform before 2025-11-15 allows remote attackers to bypass security patches and execute downgrade attacks via predictable deployment identifiers on the Vercel preview domain.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00395 Published 2025-12-19 Fixed in 2025-11-15 CWE-472
TI-2025-41484 CVE-2025-67845 · GHSA-g5pm-7qx6-f2hg

Path traversal in Mintlify Platform

Priority HIGH 68

A Directory Traversal vulnerability in the Static Asset Proxy Endpoint in Mintlify Platform before 2025-11-15 allows remote attackers to inject arbitrary web script or HTML via a crafted URL containing path traversal seq…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00519 Published 2025-12-19 Fixed in 2025-11-15 CWE-24
TI-2025-41481 CVE-2025-67842 · GHSA-rx26-cqvh-gprg

The Static Asset API in Mintlify Platform before 2025-11-15 allows remote attackers to…

Priority MEDIUM 62

The Static Asset API in Mintlify Platform before 2025-11-15 allows remote attackers to inject arbitrary web script or HTML via the subdomain parameter because any tenant's assets can be served on any other tenant's docum…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00356 Published 2025-12-19 Fixed in 2025-11-15 CWE-829