https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T20:33:04.524706+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2022-85559 cnvd-2022-85559 2026-10-03T20:33:04.528033+00:00 cnvd-2022-85559 https://cve.radiocsirt.org/vuln/euvd-2026-235083 EUVD-2026-235083 2026-10-03T20:33:04.528065+00:00 EUVD-2026-235083 https://cve.radiocsirt.org/vuln/fkie_cve-2022-4111 fkie_cve-2022-4111 2026-10-03T20:33:04.528079+00:00

Unrestricted file size limit can lead to DoS in tooljet/tooljet <1.27 by allowing a logged in attacker to upload profile pictures over 2MB.

 https://cve.radiocsirt.org/vuln/ghsa-hgp8-w8fj-r4cm GHSA-hgp8-w8fj-r4cm — ToolJet is vulnerable to Denial of Service (DoS) 2026-10-03T20:33:04.528106+00:00

Affected: npm: tooljet

ToolJet/ToolJet placed no limit on the file size for user avatars. This could cause a denial of service if too many users upload large files. This is fixed in commit 01cd3f0464747973ec329e9fb1ea12743d3235cc in version 1.27.0.

`tooljet` is no longer listed on npmjs.com but was [listed on npmjs.com in the past](https://web.archive.org/web/20220210014826/https://www.npmjs.com/package/tooljet). This advisory is maintained for historical completeness.

 https://cve.radiocsirt.org/vuln/gsd-2022-4111 gsd-2022-4111 2026-10-03T20:33:04.528132+00:00 gsd-2022-4111