Volto is a ReactJS-based frontend for the Plone Content Management System. Versions 16.34.0 and below, 17.0.0 through 17.22.1, 18.0.0 through 18.27.1, and 19.0.0-alpha.1 through 19.0.0-alpha.5, an anonymous user could cause the NodeJS serve…
Exact source revision recorded 25 Oct 2026 03:17:27 UTC. It does not establish the source's current position. Latest evidence.
nvd · CVE-2025-61668
PublishedNVD analysis and CPE criteria are source context, not proof that a package or your environment is affected. Complete affected data, logical configurations and SSVC are retained in the original JSON.
Source analysis status: Deferred
Weakness classifications: CWE-476 · CWE-754
Original publisher date fields
published: 2025-10-02T22:15:38.410
lastModified: 2026-10-12T15:10:00.207
No normalized affected-package data is projected for this source revision. The original publisher record may contain additional product and version evidence; this does not establish that a package is unaffected.
Original source record · Cite this exact observation · Complete original publisher JSON