Vulnerabilidades do Ymfe Yapi

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Ymfe Yapi: 3 registro(s), com versões afetadas e correções.
cpe:2.3:a:ymfe:yapi

CVE-2025-70060 Média · 5.4 CWE-79 09/03/2026

Cross-site Scripting (XSS) em Ymfe Yapi

An issue pertaining to CWE-79: Improper Neutralization of Input During Web Page Generation was discovered in YMFE yapi v1.12.0.

CVE-2025-70059 Alta · 7.5 CWE-400 09/03/2026

Uncontrolled Resource Consumption em Ymfe Yapi

An issue pertaining to CWE-400: Uncontrolled Resource Consumption was discovered in YMFE yapi v1.12.0 and allows attackers to cause a denial of service.

CVE-2025-70058 Alta · 7.4 CWE-295 23/02/2026

Improper Certificate Validation em Ymfe Yapi

An issue pertaining to CWE-295: Improper Certificate Validation was discovered in YMFE yapi v1.12.0. The application disables TLS/SSL certificate validation by setting 'rejectUnauthorized': false in the HTTPS agent configuration for Axios requests