What’s Vulnerable › Vulnerabilities

CVE-2025-65519

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2026-02-18 · updated 2026-06-17
• Weakness: CWE-674

Description

mayswind ezbookkeeping versions 1.2.0 and earlier contain a critical vulnerability in JSON and XML file import processing. The application fails to validate nesting depth during parsing operations, allowing authenticated attackers to trigger denial of service conditions by uploading deeply nested malicious files. This results in CPU exhaustion, service degradation, or complete service unavailability.

Affected products

• mayswind ezBookkeeping: through 1.2.0

References

• https://github.com/ictrun/EBK-SA-2025-001

Get alerted when CVE-2025-65519 or the next vulnerability affects your stack