CVE-2026-57576

Name of the Vulnerable Software and Affected Versions plone.app.dexterity versions prior to 3.2.3 plone.app.dexterity versions 4.0.0 through 4.1.2 plone.app.dexterity version 5.0.0 plone.app.contenttypes versions prior to 3.0.12 plone.app.contenttypes versions 4.0.0 through 4.0.9 plone.app.contenttypes version 5.0.0

Description An authenticated user can cause a denial of service by creating content with excessively long titles, descriptions, or uploaded-file names. This action can make the system unresponsive and may result in content that is difficult to edit or delete.

Recommendations Update plone.app.dexterity to version 3.2.3, 4.1.3, or 5.0.1. Update plone.app.contenttypes to version 3.0.12, 4.0.10, or 5.0.1.