plone.app.event vulnerabilities

1 known vulnerability in plone.app.event from Plone. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.1 Critical severity

  plone.app.event: Uncontrolled Resource Consumption

  CVE-2026-55247Aug 28, 2026Plone

  plone.app.event provides the event content type for Plone. Prior to versions 5.2.4 and 6.0.1, the iCalendar import in src/plone/app/event/ical/importer.py accepts insufficiently restricted calendar and event URLs, does not adequately bound downloaded bytes or