dotvvm vulnerabilities

2 known vulnerabilities in dotvvm from Riganti. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.2 Critical severity

  dotvvm: Missing Authorization

  CVE-2026-57578Sep 14, 2026Riganti

  DotVVM is an open source MVVM framework for web applications. Prior to 4.2.11, 4.3.15, and 5.0.0-preview09-final, AuthorizeActionFilter performs no authorization because its explicit ICommandActionFilter.OnCommandExecutingAsync, IViewModelActionFilter.OnViewMo

• 8.2 High severity

  dotvvm: Inefficient Regular Expression Complexity

  CVE-2026-57577Sep 14, 2026Riganti

  DotVVM is an open source MVVM framework for web applications. Prior to 4.2.11, 4.3.15, and 5.0.0-preview09-final, a route containing multiple unconstrained parameters in one path segment can cause excessive regular-expression backtracking in DotvvmRoute.IsMatc