{"action":"Upgrade plone-app-dexterity to 3.2.3 or later.","affected":[{"fixed":"3.2.3","introduced":"0"},{"fixed":"4.1.3","introduced":"4.0.0"},{"fixed":"5.0.1","introduced":"5.0.0"}],"component":"plone-app-dexterity","cve_ids":["CVE-2026-57576"],"ecosystem":"PyPI","epss":0.00762,"exploited":false,"fixed_versions":["3.2.3","4.1.3","5.0.1"],"ghsa_id":"GHSA-5426-92w4-wvhv","id":"tcs_01M5KHA4X295B6N0G509M1V71D","modified_at":"2026-10-01T17:45:13.658700091Z","published_at":"2026-10-01T16:38:38.736806Z","references":["https://osv.dev/vulnerability/PYSEC-2026-4137","https://github.com/plone/plone.app.dexterity/security/advisories/GHSA-5426-92w4-wvhv","https://nvd.nist.gov/vuln/detail/CVE-2026-57576","https://github.com/plone/plone.app.dexterity/pull/433","https://github.com/plone/plone.app.dexterity/commit/0d317df663823445200d0569a66a95b7e4a9c50d","https://github.com/plone/plone.app.dexterity/commit/2fdceb120ca86682a408f3a14753cfcf5126d9d9","https://github.com/plone/plone.app.dexterity/commit/411689047f9a3521899ae6992a9b0efbd0592a8f","https://github.com/plone/plone.app.dexterity/commit/cbcef731c0882146b9bf30688cdc639d879878fb","https://github.com/plone/plone.app.dexterity/commit/f3596538cf7670bb8bc27b0dfa0b1da41c8b8a3a","https://github.com/plone/plone.app.dexterity/commit/fb45bfdb18f1dfb3ed55e477947a3df9a6ee9e20","https://github.com/plone/plone.app.dexterity","https://github.com/plone/plone.app.dexterity/releases/tag/3.2.3","https://github.com/plone/plone.app.dexterity/releases/tag/4.1.3","https://github.com/plone/plone.app.dexterity/releases/tag/5.0.1","https://pypi.org/project/plone-app-dexterity","https://github.com/advisories/GHSA-5426-92w4-wvhv"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"PYSEC-2026-4137","url":"https://osv.dev/vulnerability/PYSEC-2026-4137"}],"summary":"plone.app.dexterity has a Denial of Service due to excessive title or description length"}