CVE-2026-57576: plone.app.dexterity has a Denial of Service due to excessive title or description length
When creating content with a very large title or description field, Plone can become unresponsive. Even if the content loads, it can be hard to edit or delete, because the UI is unwieldy.
References
- github.com/advisories/GHSA-5426-92w4-wvhv
- github.com/plone/plone.app.dexterity/commit/0d317df663823445200d0569a66a95b7e4a9c50d
- github.com/plone/plone.app.dexterity/commit/2fdceb120ca86682a408f3a14753cfcf5126d9d9
- github.com/plone/plone.app.dexterity/commit/411689047f9a3521899ae6992a9b0efbd0592a8f
- github.com/plone/plone.app.dexterity/commit/cbcef731c0882146b9bf30688cdc639d879878fb
- github.com/plone/plone.app.dexterity/commit/f3596538cf7670bb8bc27b0dfa0b1da41c8b8a3a
- github.com/plone/plone.app.dexterity/commit/fb45bfdb18f1dfb3ed55e477947a3df9a6ee9e20
- github.com/plone/plone.app.dexterity/pull/433
- github.com/plone/plone.app.dexterity/releases/tag/3.2.3
- github.com/plone/plone.app.dexterity/releases/tag/4.1.3
- github.com/plone/plone.app.dexterity/releases/tag/5.0.1
- github.com/plone/plone.app.dexterity/security/advisories/GHSA-5426-92w4-wvhv
- nvd.nist.gov/vuln/detail/CVE-2026-57576
Code Behaviors & Features
Detect and mitigate CVE-2026-57576 with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →