yapi-vendor vulnerabilities (npm)

4 vulnerabilities.

• yapi-vendor npm yapi disables TLS/SSL certificate validation via rejectUnauthorized: false in Axios HTTPS agent CVE-2025-70058 7.4 HighFebruary 23, 2026
• yapi-vendor npm Cross-site Scripting in yapi-vendor CVE-2021-36686 5.4 MediumJanuary 26, 2023
• yapi-vendor npm Weak JSON Web Token in yapi-vendor CVE-2021-27884 Fix available 5.1 MediumMarch 1, 2021
• yapi-vendor npm Cross-site Scripting in yapi-vendor CVE-2018-17574 Fix available 5.4 MediumSeptember 28, 2018