VYPR

Spring REST Docs

by Spring Projects

CVEs (1)

  • CVE-2026-40991MedJun 10, 2026
    risk 0.38cvss 5.9epss 0.00

    When using spring-restdocs-webtestclient or spring-restdocs-restassured to document a remote API accessed over HTTP, an attacker who compromises the API or tricks the user into documenting a malicious API can perform an XXE injection attack when the documentation-generating…