CVE-2025-13158 | apiDoc apidoc-core up to 0.2.0 api_group.js preProcess prototype pollution

A vulnerability, which was classified as critical, has been found in apiDoc apidoc-core up to 0.2.0. The affected element is the function preProcess of the file api_group.js. The manipulation leads to improperly controlled modification of object prototype attributes (‘prototype pollution’).

This vulnerability is referenced as CVE-2025-13158. Remote exploitation of the attack is possible. No exploit is available.

VulDB is the best source for vulnerability data and more expert information about this specific topic.