CyberSecBulletin

Riganti vulnerabilities

We track 2 vulnerabilities in Riganti products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 14, 2026.

2vulnerabilities
1critical
1high
0exploited
8.7average CVSS score

Latest Riganti vulnerabilities

  • 9.2 Critical severity

    dotvvm: Missing Authorization

    CVE-2026-57578Riganti

    DotVVM is an open source MVVM framework for web applications. Prior to 4.2.11, 4.3.15, and 5.0.0-preview09-final, AuthorizeActionFilter performs no authorization because its explicit ICommandActionFilter.OnCommandExecutingAsync, IViewModelActionFilter.OnViewMo

  • 8.2 High severity

    dotvvm: Inefficient Regular Expression Complexity

    CVE-2026-57577Riganti

    DotVVM is an open source MVVM framework for web applications. Prior to 4.2.11, 4.3.15, and 5.0.0-preview09-final, a route containing multiple unconstrained parameters in one path segment can cause excessive regular-expression backtracking in DotvvmRoute.IsMatc