CVE-2025-29155

Impact

An issue in petstore v.1.0.7 allows a remote attacker to execute arbitrary code via the DELETE endpoint

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• https://gist.github.com/HouqiyuA/4efd1aac7c7c7ab0cd5db48d62541a74
• https://github.com/swagger-api/swagger-petstore
• https://github.com/swagger-api/swagger-petstore/blob/master/src/main/resources/openapi.yaml