PT-2025-10721
CVE-2025-27911
·
Published
2025-03-11
·
Updated
2025-10-10
Description by
CVSS 3.1
6.5
MediumMetricsAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Datalust Seq versions prior to 2024.3.13545
Description
An issue in Datalust Seq allows expansion of identifiers in message templates to bypass the system's "Event body limit bytes" setting. This can lead to increased resource consumption. With sufficiently large events, it can cause disk space exhaustion if saved to disk, or terminate the server process with an out-of-memory error.
Recommendations
For versions prior to 2024.3.13545, update to version 2024.3.13545 or later to resolve the issue. As a temporary workaround, consider restricting the size of events to prevent excessive resource consumption.
Found an issue in the description? Have something to add? Feel free to write us 👾