Skip to content
OpenAdvisories

Product · plone

plone.app.event

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2026-55247

    plone.app.event: Denial of service via iCalendar import

    plone.app.event provides the event content type for Plone. Prior to versions 5.2.4 and 6.0.1, the iCalendar import in src/plone/app/event/ical/importer.py accepts insufficiently restricted calendar and event URLs, does not adequately bound downloaded bytes or…

    plone plone.app.event plone-app-event PyPI