What’s Vulnerable › Vulnerabilities

CVE-2025-29156

• Severity: medium (CVSS 6.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-09-25 · updated 2026-06-17
• Weakness: CWE-79

Description

Cross Site Scripting vulnerability in petstore v.1.0.7 allows a remote attacker to execute arbitrary code via a crafted script to the /api/v3/pet

Affected products

• SMARTBEAR Swagger Petstore: 1.0.7

References

• https://gist.github.com/HouqiyuA/9d2c3f0ba075d01631aff879546e419c
• https://github.com/swagger-api/swagger-petstore/blob/master/src/main/resources/openapi.yaml
• https://www.google.com/url?q=https%3A%2F%2Fgithub.com%2Fswagger-api%2Fswagger-petstore&sa=D&sntz=1&usg=AOvVaw0bPYxOZ-XKNAbTj4h0EOMD

Get alerted when CVE-2025-29156 or the next vulnerability affects your stack