Skip to content
OpenAdvisories

Package · Debian

ruby-icalendar

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium 4.3
    CVE-2026-33635

    iCalendar has ICS injection via unsanitized URI property values

    iCalendar is a Ruby library for dealing with iCalendar files in the iCalendar format defined by RFC-5545. Starting in version 2.0.0 and prior to version 2.12.2, .ics serialization does not properly sanitize URI property values, enabling ICS injection through …

    icalendar icalendar ruby-icalendar icalendar Debian Ubuntu RubyGems