Skip to content
OpenAdvisories

Vendor

calcom

15 known vulnerabilities.

Products

cal.diy 11 cal.com 5 calcom/cal.com 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 10.0
    CVE-2025-71389 Public exploit

    Cal.com before 5.9.9 Remote Code Execution via RSC

    Cal.com (calcom/cal.diy) before 5.9.9 is vulnerable to unauthenticated remote code execution because it bundles a version of Next.js whose React Server Components (RSC) request handling deserializes attacker-controlled input. A remote attacker can send a craf…

    calcom cal.diy