Threats tagged 'ghsa-xjhf-7833-3pm5'

CVE-2025-58047 is a denial-of-service vulnerability in the NodeJS server component of Volto. An anonymous user can trigger a server crash by visiting a specific URL, causing the server process to quit with an error. This issue has been patched in Volto versions 16.34.0, 17.22.1, 18.24.0, and 19.0.0-alpha.4. Users are advised to upgrade to these or later versions. As a mitigation, automatic process restarts can minimize downtime but do not prevent the crash itself.