CVE-2026-110595: BottleCRM 0.45 through 1.14.5 Memory Exhaustion via Contact and Case CSV Import

BottleCRM 0.45 through 1.14.5 Memory Exhaustion via Contact and Case CSV Import

Exact source revision recorded 23 Oct 2026 15:48:27 UTC. It does not establish the source's current position. Latest evidence.

BottleCRM

https://pypi.org

Original vendor version evidence · not evaluated as a NuGet range

{
                    "vendor": "MicroPyramid",
                    "product": "BottleCRM",
                    "defaultStatus": "unaffected",
                    "versions": [
                        {
                            "version": "0.45",
                            "lessThanOrEqual": "1.14.5",
                            "status": "affected",
                            "versionType": "custom"
                        }
                    ],
                    "packageURL": "pkg:pypi/django-crm",
                    "collectionURL": "https://pypi.org",
                    "repo": "https://github.com/Django-CRM/Django-CRM"
                }

cve-program · CVE-2026-110595

BottleCRM