VYPR
← All advisories
High severity7.4NVD Advisory· Published Feb 23, 2026· Updated Jun 17, 2026

CVE-2025-70058

CVE-2025-70058

Description

An issue pertaining to CWE-295: Improper Certificate Validation was discovered in YMFE yapi v1.12.0. The application disables TLS/SSL certificate validation by setting 'rejectUnauthorized': false in the HTTPS agent configuration for Axios requests

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
yapi-vendornpm
<= 1.12.0—

Affected products

3
  • ghsa-coords
    pkg:npm/yapi-vendor
    Range: <= 1.12.0
  • Ymfe/Yapicpe-rescue2 versions
    (expand)+ 1 more
    • (no CPE)
    • cpe:2.3:a:ymfe:yapi:1.12.0:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.