PT-2025-10721 · Datalust · Datalust Seq

Nblumhardt · Published 2025-03-11 · Updated 2025-10-10 · CVE-2025-27911

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Datalust Seq versions prior to 2024.3.13545

Description An issue in Datalust Seq allows expansion of identifiers in message templates to bypass the system's "Event body limit bytes" setting. This can lead to increased resource consumption. With sufficiently large events, it can cause disk space exhaustion if saved to disk, or terminate the server process with an out-of-memory error.

Recommendations For versions prior to 2024.3.13545, update to version 2024.3.13545 or later to resolve the issue. As a temporary workaround, consider restricting the size of events to prevent excessive resource consumption.

Fix

DoS

Allocation of Resources Without Limits

Weakness Enumeration

CWE-770

Related Identifiers

CVE-2025-27911

Affected Products

Datalust Seq

References · 9

• https://github.com/datalust/seq-tickets/issues/2365 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-27911 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-27911 · Security Note
• https://t.me/cveNotify/138252 · Telegram Post
• https://datalust.co/seq · Note
• https://twitter.com/CVEnew/status/1899374482348785970 · Twitter Post
• https://t.me/cvetracker/18908 · Telegram Post
• https://t.me/cvenotify/114184 · Telegram Post
• https://t.me/cvedetector/20059 · Telegram Post