Denial-of-service (DoS)

@plone/volto is vulnerable to a denial-of-service DoS. The vulnerability is due to improper handling of a specific URL request, which allows an attacker to crash the NodeJS server component by simply visiting that crafted URL...

EUVD-2025-32021

Malicious code in bioql PyPI...

Denial Of Service (DoS)

@plone/volto is vulnerable to Denial of Service DoS. The vulnerability is due to improper handling of specific URL requests which allows an attacker to crash the NodeJS server component and cause downtime...

Authentication Bypass

@plone/volto is vulnerable to authentication bypasses. A remote attacker is able to get attacker's authentication cookie replaced with the authentication cookie from another user, effectively giving the attacker full access to the victim's account and privileges...