CVE-2026-57149
2 advisories.
PyPI/plone-app-portlets CVE-2026-57149: critical 9.9
plone.app.portlets Vulnerable to Remote Code Execution via TALES Injection
Action: Upgrade plone-app-portlets to 5.0.8 or later.
pip install plone-app-portlets==7.0.2pip install plone-app-portlets==6.0.4pip install plone-app-portlets==5.0.8Affected
| introduced | fixed | last affected |
|---|---|---|
| 7.0.0 | 7.0.2 | - |
| 6.0.0 | 6.0.4 | - |
| 5.0.0 | 5.0.8 | - |
Fixed versions
| 7.0.2 | 6.0.4 | 5.0.8 |
Sources
- osv: GHSA-rr49-f9g6-c9r5
- https://github.com/plone/plone.app.portlets/security/advisories/GHSA-rr49-f9g6-c9r5
- https://nvd.nist.gov/vuln/detail/CVE-2026-57149
- https://github.com/plone/plone.app.portlets/commit/1d9cacacfad9ed08b890dadc6e75741e295dc151
- https://github.com/plone/plone.app.portlets/commit/8a0641dc4054a2b13834bba00c67cd9a2fd189e1
- https://github.com/plone/plone.app.portlets/commit/fb979f01b57dd2fc06c90ee6577eb5eb285da8f1
- https://github.com/plone/plone.app.portlets
- https://github.com/plone/plone.app.portlets/releases/tag/5.0.8
- https://github.com/plone/plone.app.portlets/releases/tag/6.0.4
- https://github.com/plone/plone.app.portlets/releases/tag/7.0.2
CVE-2026-57149 · published · modified · JSON
PyPI/plone-app-portlets CVE-2026-57149: critical 9.9
plone.app.portlets Vulnerable to Remote Code Execution via TALES Injection
Action: Upgrade plone-app-portlets to 5.0.8 or later.
pip install plone-app-portlets==5.0.8pip install plone-app-portlets==6.0.4pip install plone-app-portlets==7.0.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 5.0.0 | 5.0.8 | - |
| 6.0.0 | 6.0.4 | - |
| 7.0.0 | 7.0.2 | - |
Fixed versions
| 5.0.8 | 6.0.4 | 7.0.2 |
Sources
- osv: PYSEC-2026-4138
- https://github.com/plone/plone.app.portlets/security/advisories/GHSA-rr49-f9g6-c9r5
- https://nvd.nist.gov/vuln/detail/CVE-2026-57149
- https://github.com/plone/plone.app.portlets/commit/1d9cacacfad9ed08b890dadc6e75741e295dc151
- https://github.com/plone/plone.app.portlets/commit/8a0641dc4054a2b13834bba00c67cd9a2fd189e1
- https://github.com/plone/plone.app.portlets/commit/fb979f01b57dd2fc06c90ee6577eb5eb285da8f1
- https://github.com/plone/plone.app.portlets
- https://github.com/plone/plone.app.portlets/releases/tag/5.0.8
- https://github.com/plone/plone.app.portlets/releases/tag/6.0.4
- https://github.com/plone/plone.app.portlets/releases/tag/7.0.2
- https://pypi.org/project/plone-app-portlets
- https://github.com/advisories/GHSA-rr49-f9g6-c9r5
CVE-2026-57149 · published · modified · JSON