CVE-2026-57581

DotVVM , an open-source MVVM framework for web applications, is affected by an unrestricted file upload vulnerability in DotvvmFileUploadMiddleware . Prior to versions 4.2.11 , 4.3.15 , and 5.0.0-preview09-final , applications with configured file upload storage do not validate the X-DotVVM-Uploa...