https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-70060.htmlhttps://patchthecve.com/cve/CVE-2025-70060.htmlWed, 17 Jun 2026 10:03:05 +0000MEDIUM 5.4: An issue pertaining to CWE-79: Improper Neutralization of Input During Web Page Generation was discovered in YMFE yapi v1.12.0.https://patchthecve.com/cve/CVE-2025-70059.htmlhttps://patchthecve.com/cve/CVE-2025-70059.htmlWed, 17 Jun 2026 10:03:05 +0000HIGH 7.5: An issue pertaining to CWE-400: Uncontrolled Resource Consumption was discovered in YMFE yapi v1.12.0 and allows attackers to cause a denial of service.https://patchthecve.com/cve/CVE-2025-70058.htmlhttps://patchthecve.com/cve/CVE-2025-70058.htmlWed, 17 Jun 2026 10:03:05 +0000HIGH 7.4: An issue pertaining to CWE-295: Improper Certificate Validation was discovered in YMFE yapi v1.12.0. The application disables TLS/SSL certificate validation by setting 'rejectUnauthorized': false in the HTTPS agent configuration for Axios requests