https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-15T04:10:28.653286+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-110595 CVE-2026-110595 — BottleCRM 0.45 through 1.14.5 Memory Exhaustion via Contact and Case CSV Import 2026-10-15T04:10:28.654457+00:00

Affected: MicroPyramid BottleCRM

BottleCRM 0.45 through 1.14.5 contains an uncontrolled memory allocation vulnerability in _read_upload() that reads entire CSV uploads before enforcing the 5 MB limit. Authenticated users with mass-import permission can send oversized CSV files concurrently to /api/contacts/import/ and /api/cases/import/ endpoints to exhaust worker memory and trigger out-of-memory termination.