Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2025-70058
7.4
HIGHCVSS v3
Published
February 23, 2026
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
An issue pertaining to CWE-295: Improper Certificate Validation was discovered in YMFE yapi v1.12.0. The application disables TLS/SSL certificate validation by setting 'rejectUnauthorized': false in the HTTPS agent configuration for Axios requests
GitHub