CyberSecBulletin

Collective vulnerabilities

We track 1 vulnerability in Collective products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 25, 2026.

1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score

Latest Collective vulnerabilities

  • 7.5 High severity

    icalendar: Uncontrolled Resource Consumption

    CVE-2026-55099Collective

    icalendar is an RFC 5545 compatible parser and generator of iCalendar files for Python. From 7.1.0 until 7.1.3, the Component equality method in src/icalendar/cal/component.py compares nested subcomponents with two membership loops, and each membership test in