{"action":"Upgrade plone-app-dexterity to 3.2.3 or later.","affected":[{"fixed":"5.0.1","introduced":"5.0.0"},{"fixed":"4.1.3","introduced":"4.0.0"},{"fixed":"3.2.3","introduced":"0"}],"component":"plone-app-dexterity","cve_ids":["CVE-2026-57576"],"ecosystem":"PyPI","epss":0.00762,"exploited":false,"fixed_versions":["5.0.1","4.1.3","3.2.3"],"ghsa_id":"GHSA-5426-92w4-wvhv","id":"tcs_01M5KEZRYCDD0NM57MEMAYCG8H","modified_at":"2026-10-01T17:55:54.152002091Z","published_at":"2026-09-23T21:48:22Z","references":["https://osv.dev/vulnerability/GHSA-5426-92w4-wvhv","https://github.com/plone/plone.app.dexterity/security/advisories/GHSA-5426-92w4-wvhv","https://nvd.nist.gov/vuln/detail/CVE-2026-57576","https://github.com/plone/plone.app.dexterity/pull/433","https://github.com/plone/plone.app.dexterity/commit/0d317df663823445200d0569a66a95b7e4a9c50d","https://github.com/plone/plone.app.dexterity/commit/2fdceb120ca86682a408f3a14753cfcf5126d9d9","https://github.com/plone/plone.app.dexterity/commit/411689047f9a3521899ae6992a9b0efbd0592a8f","https://github.com/plone/plone.app.dexterity/commit/cbcef731c0882146b9bf30688cdc639d879878fb","https://github.com/plone/plone.app.dexterity/commit/f3596538cf7670bb8bc27b0dfa0b1da41c8b8a3a","https://github.com/plone/plone.app.dexterity/commit/fb45bfdb18f1dfb3ed55e477947a3df9a6ee9e20","https://github.com/plone/plone.app.dexterity","https://github.com/plone/plone.app.dexterity/releases/tag/3.2.3","https://github.com/plone/plone.app.dexterity/releases/tag/4.1.3","https://github.com/plone/plone.app.dexterity/releases/tag/5.0.1"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-5426-92w4-wvhv","url":"https://osv.dev/vulnerability/GHSA-5426-92w4-wvhv"}],"summary":"plone.app.dexterity has a Denial of Service due to excessive title or description length"}