CVE-2025-54320
Medium · 4.3CVSS
4.3
EPSS
0.4%
Published
Nov 18, 2025
CISA due date
—
The record
In Ascertia SigningHub through 8.6.8, there is a lack of rate limiting on the invite user function, leading to an email bombing vulnerability. An authenticated attacker can exploit this by automating invite requests.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|