Skip to content
OpenAdvisories

Package · PyPI

plone-app-portlets

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Critical 9.9
    CVE-2026-57149

    plone.app.portlets Vulnerable to Remote Code Execution via TALES Injection

    plone.app.portlets.portlets provides a Plone-specific user interface for plone.portlets, as well as a standard set of portlets that ship with Plone. Starting in version 5.0.0 and prior to versions 5.0.8, 6.0.4, and 7.0.2, the Classic portlet (plone.app.portle…

    plone plone.app.portlets plone-app-portlets PyPI
  • Critical 9.1
    CVE-2026-55248

    plone.app.portlets: Denial of service via RSS feed portlet

    plone.app.portlets provides portlets and a Plone-specific user interface for plone.portlets. Prior to 5.0.8, 6.0.4, and 7.0.2, a member who can add an RSS portlet can set its feed URL to a very large response, causing src/plone/app/portlets/portlets/rss.py to…

    plone plone.app.portlets plone-app-portlets PyPI