PyPI/plone-app-portlets CVE-2026-55248: critical 9.1, EPSS 0.44%

plone.app.portlets vulnerable to denial of service via RSS feed portlet

Action: Upgrade plone-app-portlets to 5.0.8 or later.

pip install plone-app-portlets==7.0.2

pip install plone-app-portlets==6.0.4

pip install plone-app-portlets==5.0.8

Affected

Fixed versions

Sources

• osv: GHSA-x5g3-w747-2h8q
• https://github.com/plone/plone.app.portlets/security/advisories/GHSA-x5g3-w747-2h8q
• https://github.com/plone/plone.app.portlets/commit/09da52ef7b297daa8e0cfd2361e47c37d9b073ad
• https://github.com/plone/plone.app.portlets/commit/9f16b6fb10211916686c6c346ea174bf517e3fbd
• https://github.com/plone/plone.app.portlets/commit/a3b2c2887165b308cd915cbb87b8276f90a76680
• https://github.com/plone/plone.app.portlets/commit/df5e256baee55083cbd6b9a2623675d4cb26b6cd
• https://github.com/plone/plone.app.portlets

CVE-2026-55248 · published 2026-08-28T18:41:35Z · modified 2026-09-10T12:25:27.212176003Z · JSON