CVE-2026-52840
1 advisory.
Packagist/alextselegidis/easyappointments CVE-2026-52840: low 2.7, EPSS 0.31%
Easy!Appointments has server-side request forgery in CalDAV connection test that exposes the deployment's internal network
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 1.5.2 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-pm5p-7w5h-jm5q
- https://github.com/alextselegidis/easyappointments/security/advisories/GHSA-pm5p-7w5h-jm5q
- https://nvd.nist.gov/vuln/detail/CVE-2026-52840
- https://github.com/alextselegidis/easyappointments/commit/2da2baed18ec32ad7916e507815709c8f010d510
- https://github.com/alextselegidis/easyappointments/commit/4abb10545d83ac1a57d03f6502376ee67696ea7c
- https://github.com/alextselegidis/easyappointments/commit/6b34b78c47790dfd1dec27cf62926db51be276e9
- https://github.com/alextselegidis/easyappointments/commit/6eb9336a91cfb276379506625e81f5bd9ed3a536
- https://github.com/alextselegidis/easyappointments
- https://github.com/alextselegidis/easyappointments/releases/tag/1.6.0
CVE-2026-52840 · published · modified · JSON