CVE-2025-70058

CVE-2025-70058 affects YMFE yapi v1.12.0. The root cause is improper TLS/SSL certificate validation caused by Axios HTTPS agent configuration that sets rejectUnauthorized to false, enabling MITM-like interception. Documented in multiple sources (YAPI-related advisories and NVD/Red Hat entries). T...

CVE-2025-70060

The CVE-2025-70060 entry concerns YMFE yapi v1.12.0 with a CWE-79 weakness (Improper Neutralization of Input During Web Page Generation). The connected sources consistently identify this as a input handling flaw in the web page generation process for YMFE yapi, without detailing exploited vectors...

CVE-2025-70059

CVE-2025-70059 affects YMFE yapi v1.12.0, with the root cause described as CWE-400 Uncontrolled Resource Consumption leading to denial of service. The connected sources consistently report this DoS impact for YMFE yapi 1.12.0. No remediation or patched version is identified in the supplied docume...