Skip to content
OpenAdvisories

Package · npm

apidoc-core

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Critical 9.3
    CVE-2025-13158

    apidoc-core - prototype pollution in api_group.js, api_param_title.js, api_use.js, and api_permission.js worker

    Prototype pollution vulnerability in apidoc-core versions 0.2.0 and all subsequent versions allows remote attackers to modify JavaScript object prototypes via malformed data structures, including the “define” property processed by the application, potentially…

    apiDoc apidoc-core apidoc-core npm
  • High 7.5
    CVE-2025-57317

    apidoc-core is vulnerable to prototype pollution

    apidoc-core is the core parser library to generate apidoc result following the apidoc-spec. A Prototype Pollution vulnerability in the preProcess function of apidoc-core versions thru 0.15.0 allows attackers to inject properties on Object.prototype via supply…

    apidoc-core npm