npmPackage

apidoc-core

2 known vulnerabilities (1 critical, 1 high), with the versions each affects and the releases that fix them.

Latest release: 0.15.0 (Mar 17, 2021): affected by 2 advisories
Newest unaffected release: Every release is affected by at least one advisory
Advisories: 2 · 1 critical, 1 high

Version timeline

Every release cve.now has on record, lowest version on the left; each bar is a run of versions an advisory affects.

CVE-2025-13158Critical 9.3
apidoc-core - prototype pollution in api_group.js, api_param_title.js, api_use.js, and api_permission.js worker
Affected: from 0.2.0, through 0.15.0.
No fix released. The latest release, 0.15.0, is still affected.
>99.9% of apidoc-core downloads last week were affected versions (48.1K).
CVE-2025-57317High 7.5
apidoc-core is the core parser library to generate apidoc result following the apidoc-spec.
Affected: through 0.15.0.
No fix released. The latest release, 0.15.0, is still affected.
100% of apidoc-core downloads last week were affected versions (48.2K).