Description
GROWI provided by GROWI, Inc. is vulnerable to a regular expression denial of service (ReDoS) via a crafted input string.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| GROWI | GROWI | v7.5.0 and earlier | — |
High · 7.5
CVE-2026-41040
EUVD-2026-25199GHSA-vjmw-64m9-xqq5
GROWI provided by GROWI, Inc. is vulnerable to a regular expression denial of service (ReDoS) via a crafted input string.
Published Apr 23, 2026 · Updated Apr 23, 2026 · Assigned by jpcert