Skip to content
OpenAdvisories

Vendor

Work90210

1 known vulnerabilities.

Products

APIFold 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2026-47769

    APIFold Vulnerable to Unauthenticated Webhook Event Injection

    APIFold reads an OpenAPI 3.x or Swagger 2.x specification and generates a live, production-ready MCP server endpoint. Prior to commit 7f19b52280f414f57af2b79a95333d1c8fbeece5, the `/webhooks/:serverSlug/:eventName` endpoint accepts arbitrary unauthenticated J…

    Work90210 APIFold