Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

1 record

Vendor: apiDoc Clear all filters
TI-2025-12029 CVE-2025-13158 · GHSA-6vj3-p34w-xxjp

apidoc-core - prototype pollution in api_group.js, api_param_title.js, api_use.js, and api_permission.js worker

Priority MEDIUM 49

Prototype pollution vulnerability in apidoc-core versions 0.2.0 and all subsequent versions allows remote attackers to modify JavaScript object prototypes via malformed data structures, including the “define” property pr…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00503 Published 2025-12-26 No fix listed CWE-1321