PyPI/plone-app-event CVE-2026-55247: critical 9.1, EPSS 0.44%
plone.app.event vulnerable to denial of service via iCalendar import
Action: Upgrade plone-app-event to 5.2.4 or later.
pip install plone-app-event==5.2.4pip install plone-app-event==6.0.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.2.4 | - |
| 6.0.0a1 | 6.0.1 | - |
Fixed versions
| 5.2.4 | 6.0.1 |
Sources
- osv: GHSA-r82h-mqw3-fc56
- https://github.com/plone/plone.app.event/security/advisories/GHSA-r82h-mqw3-fc56
- https://github.com/plone/plone.app.event/commit/1e3c83c15a24d1a789cdb012593505bc5620e28e
- https://github.com/plone/plone.app.event/commit/4de5eb3ea9e4f7f1781622e6d64fc086629d1437
- https://github.com/plone/plone.app.event
- https://github.com/plone/plone.app.event/releases/tag/5.2.4
- https://github.com/plone/plone.app.event/releases/tag/6.0.1
CVE-2026-55247 · published · modified · JSON