PyPI/plone-app-dexterity CVE-2026-57576: medium 6.5, EPSS 0.76%

plone.app.dexterity has a Denial of Service due to excessive title or description length

Action: Upgrade plone-app-dexterity to 3.2.3 or later.

pip install plone-app-dexterity==5.0.1

pip install plone-app-dexterity==4.1.3

pip install plone-app-dexterity==3.2.3

Affected

Fixed versions

Sources

• osv: GHSA-5426-92w4-wvhv
• https://github.com/plone/plone.app.dexterity/security/advisories/GHSA-5426-92w4-wvhv
• https://nvd.nist.gov/vuln/detail/CVE-2026-57576
• https://github.com/plone/plone.app.dexterity/pull/433
• https://github.com/plone/plone.app.dexterity/commit/0d317df663823445200d0569a66a95b7e4a9c50d
• https://github.com/plone/plone.app.dexterity/commit/2fdceb120ca86682a408f3a14753cfcf5126d9d9
• https://github.com/plone/plone.app.dexterity/commit/411689047f9a3521899ae6992a9b0efbd0592a8f
• https://github.com/plone/plone.app.dexterity/commit/cbcef731c0882146b9bf30688cdc639d879878fb
• https://github.com/plone/plone.app.dexterity/commit/f3596538cf7670bb8bc27b0dfa0b1da41c8b8a3a
• https://github.com/plone/plone.app.dexterity/commit/fb45bfdb18f1dfb3ed55e477947a3df9a6ee9e20
• https://github.com/plone/plone.app.dexterity
• https://github.com/plone/plone.app.dexterity/releases/tag/3.2.3
• https://github.com/plone/plone.app.dexterity/releases/tag/4.1.3
• https://github.com/plone/plone.app.dexterity/releases/tag/5.0.1

CVE-2026-57576 · published 2026-09-23T21:48:22Z · modified 2026-10-01T17:55:54.152002091Z · JSON