{"action":"Upgrade plone-app-contenttypes to 3.0.12 or later.","affected":[{"fixed":"5.0.1","introduced":"5.0.0"},{"fixed":"4.0.10","introduced":"4.0.0"},{"fixed":"3.0.12","introduced":"0"}],"component":"plone-app-contenttypes","cve_ids":[],"ecosystem":"PyPI","exploited":false,"fixed_versions":["5.0.1","4.0.10","3.0.12"],"ghsa_id":"GHSA-8pcw-h6w9-h46g","id":"tcs_01M5KF8Q4A6FF3AR9NAVR3G7CP","modified_at":"2026-09-23T22:00:04.489009979Z","published_at":"2026-09-23T21:49:51Z","references":["https://osv.dev/vulnerability/GHSA-8pcw-h6w9-h46g","https://github.com/plone/plone.app.contenttypes/security/advisories/GHSA-8pcw-h6w9-h46g","https://github.com/plone/plone.app.contenttypes/pull/744","https://github.com/plone/plone.app.contenttypes/commit/13dc98a578341aac24a1e65fd9bc7ac8a07d168a","https://github.com/plone/plone.app.contenttypes/commit/21bae6ebe424689eeac9a5884fc0da35f4944e63","https://github.com/plone/plone.app.contenttypes/commit/639c0619f371df578e69ec94e5ca98e60fd6ed58","https://github.com/plone/plone.app.contenttypes/commit/7bb03e8ec6c6bd0e645f445b0755e85a51afb158","https://github.com/plone/plone.app.contenttypes/commit/bed1547d4f8b1fc995f2c76f30ba5f20276a8ad6","https://github.com/plone/plone.app.contenttypes","https://github.com/plone/plone.app.contenttypes/releases/tag/3.0.12","https://github.com/plone/plone.app.contenttypes/releases/tag/4.0.10","https://github.com/plone/plone.app.contenttypes/releases/tag/5.0.1"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-8pcw-h6w9-h46g","url":"https://osv.dev/vulnerability/GHSA-8pcw-h6w9-h46g"}],"summary":"plone.app.contenttypes has a Denial of Service in File Upload due to excessive filename length"}