{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0.2.0","last_affected":"0.15.0"}],"component":"apidoc-core","cve_ids":["CVE-2025-13158"],"ecosystem":"npm","epss":0.00503,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-6vj3-p34w-xxjp","id":"tcs_01M5KF81GTR9FKTGJB2P5QAJ9A","modified_at":"2025-12-26T20:11:13.793145Z","published_at":"2025-12-26T18:30:26Z","references":["https://osv.dev/vulnerability/GHSA-6vj3-p34w-xxjp","https://nvd.nist.gov/vuln/detail/CVE-2025-13158","https://github.com/apidoc/apidoc-core","https://www.sonatype.com/security-advisories/cve-2025-13158"],"severity":{"label":"critical","score":9.3},"sources":[{"source":"osv","source_id":"GHSA-6vj3-p34w-xxjp","url":"https://osv.dev/vulnerability/GHSA-6vj3-p34w-xxjp"},{"source":"nvd","source_id":"CVE-2025-13158","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-13158"}],"summary":"apidoc-core has a prototype pollution vulnerability"}