{"id":"CVE-2025-27911","aliases":["EUVD-2025-7819","GHSA-q6rx-mvx9-c693"],"status":"published","title":"An issue was discovered in Datalust Seq before 2024.3.13545. Expansion of identifiers in message...","description":"An issue was discovered in Datalust Seq before 2024.3.13545. Expansion of identifiers in message templates can be used to bypass the system \"Event body limit bytes\" setting, leading to increased resource consumption. With sufficiently large events, there can be disk space exhaustion (if saved to disk) or a termination of the server process with an out-of-memory error.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:F/RL:O/RC:C","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00436,"percentile":0.38375,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-770"],"published":"2025-03-11T00:00:00Z","modified":"2026-06-17T09:04:22Z","products":[{"vendor":"datalust","product":"seq"}],"references":[{"url":"https://datalust.co/seq","tags":["Product"]},{"url":"https://github.com/datalust/seq-tickets/issues/2365","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-27911"},{"url":"https://github.com/advisories/GHSA-q6rx-mvx9-c693"}],"sources":{"cve":[{"id":"CVE-2025-27911","description":"An issue was discovered in Datalust Seq before 2024.3.13545. Expansion of identifiers in message templates can be used to bypass the system \"Event body limit bytes\" setting, leading to increased resource consumption. With sufficiently large events, there can be disk space exhaustion (if saved to disk) or a termination of the server process with an out-of-memory error.","status":"published","published":"2025-03-11T00:00:00Z","modified":"2025-03-11T13:22:20.067Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:F/RL:O/RC:C","level":"medium","assessor":"cna"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T14:32:42.411662Z"}],"euvd":[{"id":"EUVD-2025-7819","description":"An issue was discovered in Datalust Seq before 2024.3.13545. Expansion of identifiers in message templates can be used to bypass the system \"Event body limit bytes\" setting, leading to increased resource consumption. With sufficiently large events, there can be disk space exhaustion (if saved to disk) or a termination of the server process with an out-of-memory error.","status":"published","published":"2025-03-11T00:00:00Z","modified":"2025-03-11T13:22:20Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:F/RL:O/RC:C","level":"medium"}],"updated_at":"2026-11-02T20:53:08.182954Z"}],"ghsa":[{"id":"GHSA-q6rx-mvx9-c693","title":"An issue was discovered in Datalust Seq before 2024.3.13545. Expansion of identifiers in message...","description":"An issue was discovered in Datalust Seq before 2024.3.13545. Expansion of identifiers in message templates can be used to bypass the system \"Event body limit bytes\" setting, leading to increased resource consumption. With sufficiently large events, there can be disk space exhaustion (if saved to disk) or a termination of the server process with an out-of-memory error.","status":"published","published":"2025-03-11T09:30:30Z","modified":"2025-03-11T09:30:38Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T15:00:12.792548Z"}],"nvd":[{"id":"CVE-2025-27911","description":"An issue was discovered in Datalust Seq before 2024.3.13545. Expansion of identifiers in message templates can be used to bypass the system \"Event body limit bytes\" setting, leading to increased resource consumption. With sufficiently large events, there can be disk space exhaustion (if saved to disk) or a termination of the server process with an out-of-memory error.","status":"published","published":"2025-03-11T08:15:11.5Z","modified":"2026-06-17T09:04:22.42Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T14:10:53.93104Z"}]}}