solspace/craft-freeform Has a DoS Vulnerability

🗓️ 15 Jan 2026 20:12:25Reported by GitHub Advisory DatabaseType

Freeform plugin 4.1.29 DoS via data: URIs in Axios causing memory exhaustion (CVE-2025-58754).

Reporter	Title	Published	Views	Family All 127
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM watsonx Orchestrate Developer Edition	17 Dec 202509:51	–	ibm
IBM Security Bulletins	Security Bulletin: IBM watsonx Orchestrate Developer Edition affected by vulnerability in axios-1.8.3.tgz	11 Nov 202515:47	–	ibm
IBM Security Bulletins	Security Bulletin: IBM watsonx.data integration has several vulnerabilities due to open source packages (CVE-2025-62727, CVE-2025-58754)	20 Mar 202616:38	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM MQ Operator and Queue manager container images	14 Nov 202514:06	–	ibm
IBM Security Bulletins	Security Bulletin: Denial of Service vulnerability in axios may affect IBM Business Automation Workflow - CVE-2025-58754	2 Feb 202616:15	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Security QRadar EDR Software	27 Nov 202512:09	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Controller	4 Dec 202514:46	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling External Authentication Server is vulnerable to multiple issues	17 Feb 202612:04	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM QRadar Use Case Manager app	2 Dec 202514:51	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Concert Software.	22 Dec 202509:22	–	ibm

Vulners

Node

Source	Link
github	www.github.com/axios/axios/security/advisories/GHSA-4hjh-wcwx-xvwj
github	www.github.com/solspace/craft-freeform/security/advisories/GHSA-58q2-9x27-h2jm
github	www.github.com/axios/axios/pull/7011
github	www.github.com/axios/axios/commit/945435fc51467303768202250debb8d4ae892593
github	www.github.com/solspace/craft-freeform/commit/e7402a1d1ce9f28ecb6ce659885ac66391d3a040
github	www.github.com/axios/axios/releases/tag/v1.12.0
github	www.github.com/solspace/craft-freeform/releases/tag/v4.1.30
github	www.github.com/advisories/GHSA-58q2-9x27-h2jm

15 Jan 2026 22:31Current

6.1Medium risk

Vulners AI Score6.1

CVSS 3.17.5

EPSS0.00257

SSVC