Where
-Infinity
0

Trending

Last week
Last month
Last year

Mintlify Mintlify PlatformThe GitHub Integration API in Mintlify Platform before 2025-11-15 allows remote attackers to obtain …

Risk 26
Severity
5
AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

The GitHub Integration API in Mintlify Platform before 2025-11-15 allows remote attackers to obtain sensitive repository metadata via the repository owner and name fields. It fails to validate that the repository owner and name fields provided during configuration belong to the specific GitHub App Installation ID associated with the user's organization.

First published (updated )
CVE-2025-67844

Mintlify Mintlify PlatformA Server-Side Template Injection (SSTI) vulnerability in the MDX Rendering Engine in Mintlify Platfo…

Risk 86
Severity
9.8
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L

A Server-Side Template Injection (SSTI) vulnerability in the MDX Rendering Engine in Mintlify Platform before 2025-11-15 allows remote attackers to execute arbitrary code via inline JSX expressions in an MDX file.

First published (updated )
CVE-2025-67843

Mintlify Mintlify PlatformThe Static Asset API in Mintlify Platform before 2025-11-15 allows remote attackers to inject arbitr…

Risk 39
Severity
6.4
AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

The Static Asset API in Mintlify Platform before 2025-11-15 allows remote attackers to inject arbitrary web script or HTML via the subdomain parameter because any tenant's assets can be served on any other tenant's documentation site.

First published (updated )
CVE-2025-67842

Mintlify Mintlify PlatformPath Traversal

Risk 39
Severity
6.4
Path Traversal
AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

A Directory Traversal vulnerability in the Static Asset Proxy Endpoint in Mintlify Platform before 2025-11-15 allows remote attackers to inject arbitrary web script or HTML via a crafted URL containing path traversal sequences.

First published (updated )
CVE-2025-67845

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203