Skip to content
OpenAdvisories

Vendor

riganti

3 known vulnerabilities.

Products

dotvvm 3
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.2
    CVE-2026-57578

    DotVVM: Missing authorization in AuthorizeActionFilter

    DotVVM is an open source MVVM framework for web applications. Prior to 4.2.11, 4.3.15, and 5.0.0-preview09-final, AuthorizeActionFilter performs no authorization because its explicit ICommandActionFilter.OnCommandExecutingAsync, IViewModelActionFilter.OnViewM…

    riganti dotvvm