Security Disclosure - November 2025

Resolved

Started

Lasted 431h 57m

View official incident ↗

Updates

  1. Resolved

    This is fully resolved. Please see our related blog post: https://www.mintlify.com/blog/working-with-security-researchers-november-2025 for any more information, or contact support@mintlify.com

  2. Monitoring

    Earlier this year, in November, Mintlify underwent a security event, conducted by a small group of security researchers who made responsible disclosure of several vulnerabilities. After making contact with these researchers, we discovered five total vulnerabilities: 1. CVE-2025-67842 2. CVE-2025-67843 3. CVE-2025-67844 4. CVE-2025-67845 5. CVE-2025-67846 These ranged from critical to medium, and each was patched within hours of discovery. After a comprehensive audit of all user & customer data, assets, and configurations, we did not find any evidence of exploitation of any of the listed vulnerabilities. If you are a Mintlify customer, no action is required, and you will have already been contacted regarding this event if we believed you had been at any risk. For more information, please see our associated blog post: http://mintlify.com/blog/working-with-security-researchers-november-2025