Skip to content
OpenAdvisories

Vendor

MicroPyramid

4 known vulnerabilities.

Products

BottleCRM 4
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 4.3
    CVE-2026-110595

    BottleCRM 0.45 through 1.14.5 Memory Exhaustion via Contact and Case CSV Import

    BottleCRM 0.45 through 1.14.5 contains an uncontrolled memory allocation vulnerability in _read_upload() that reads entire CSV uploads before enforcing the 5 MB limit. Authenticated users with mass-import permission can send oversized CSV files concurrently t…

    MicroPyramid BottleCRM
  • Medium 4.9
    CVE-2026-110594

    BottleCRM 0.43 through 1.14.5 ReDoS via Case Routing Rule Regex

    BottleCRM 0.43 through 1.14.5 contains a regular expression denial of service vulnerability that allows authenticated organization administrators to block web workers via unbounded routing rule regex patterns. Attackers can create a routing rule with a catast…

    MicroPyramid BottleCRM
  • Medium 5.4
    CVE-2026-110593

    BottleCRM through 1.14.5 Server-Side Template Injection via Account Email create_mail

    BottleCRM through 1.14.5 contains a server-side template injection vulnerability in the send_email Celery task, which compiles the user-supplied AccountEmail message_body with django.template.Template(). Authenticated organization members can submit template …

    MicroPyramid BottleCRM