PatchTheCVEmintlify vulnerabilities
Recent CVEs affecting mintlify products. 5 tracked.
mintlify has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 5. Most recent: 2025-12-19. Highest priority: CVE-2025-67843 (score 50/100).
- CVE-2025-67846 MEDIUM 4.9 UPGRADE The Deployment Infrastructure in Mintlify Platform before 2025-11-15 allows remote attackers to bypass securit
- CVE-2025-67845 MEDIUM 6.4 UPGRADE A Directory Traversal vulnerability in the Static Asset Proxy Endpoint in Mintlify Platform before 2025-11-15
- CVE-2025-67844 MEDIUM 5.0 UPGRADE The GitHub Integration API in Mintlify Platform before 2025-11-15 allows remote attackers to obtain sensitive
- CVE-2025-67843 HIGH 8.3 UPGRADE A Server-Side Template Injection (SSTI) vulnerability in the MDX Rendering Engine in Mintlify Platform before
- CVE-2025-67842 MEDIUM 6.4 UPGRADE The Static Asset API in Mintlify Platform before 2025-11-15 allows remote attackers to inject arbitrary web sc
FAQ
How do I fix mintlify vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is mintlify being exploited right now?
None of the tracked mintlify CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which mintlify CVE should I patch first?
CVE-2025-67843 currently ranks highest (50/100): A Server-Side Template Injection (SSTI) vulnerability in the MDX Rendering Engine in Mintlify Platform before .