What’s Vulnerable › Vulnerabilities
CVE-2025-27911
- Severity: medium (CVSS 6.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.4% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2025-03-11 · updated 2026-06-17
- Weakness: CWE-770
Description
An issue was discovered in Datalust Seq before 2024.3.13545. Expansion of identifiers in message templates can be used to bypass the system "Event body limit bytes" setting, leading to increased resource consumption. With sufficiently large events, there can be disk space exhaustion (if saved to disk) or a termination of the server process with an out-of-memory error.
Affected products
- Datalust Seq: before 2024.3.13545 — fixed in 2024.3.13545
How to fix
Upgrade to a fixed version: Datalust Seq 2024.3.13545. Check the vendor advisory for mitigations.
References
Get alerted when CVE-2025-27911 or the next vulnerability affects your stack