Skip to content
OpenAdvisories

Vendor

riganti

3 known vulnerabilities.

Products

dotvvm 3
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2026-57581

    DotVVM: Unrestricted file upload

    DotVVM is an open source MVVM framework for web applications. Prior to 4.2.11, 4.3.15, and 5.0.0-preview09-final, applications with configured file upload storage allow unauthenticated users to submit files directly to DotvvmFileUploadMiddleware without an X-…

    riganti dotvvm