MEDIUM5.1npm
GHSA-2h3h-vw8r-82rp· CVE-2021-27884Weak JSON Web Token in yapi-vendor
Modified: 11/8/2023
package
npm/yapi-vendor
pkg:npm/yapi-vendor
MEDIUM5.4npm
GHSA-4jqw-vfmj-9rmh· CVE-2021-36686Cross-site Scripting in yapi-vendor
Modified: 11/8/2023
MEDIUM5.4npm
GHSA-5xgh-643p-cp2g· CVE-2018-17574Cross-site Scripting in yapi-vendor
Modified: 11/8/2023
HIGH7.4npm
GHSA-663h-2vr3-ghrj· CVE-2025-70058yapi disables TLS/SSL certificate validation via rejectUnauthorized: false in Axios HTTPS agent
Modified: 2/25/2026