{"action":"Upgrade plone-app-event to 5.2.4 or later.","affected":[{"fixed":"5.2.4","introduced":"0"},{"fixed":"6.0.1","introduced":"6.0.0a1"}],"component":"plone-app-event","cve_ids":["CVE-2026-55247"],"ecosystem":"PyPI","epss":0.00441,"exploited":false,"fixed_versions":["5.2.4","6.0.1"],"ghsa_id":"GHSA-r82h-mqw3-fc56","id":"tcs_01M5KFXHK867PE7CX7JSJ2AXMX","modified_at":"2026-09-10T12:25:52.689617832Z","published_at":"2026-08-28T18:59:42Z","references":["https://osv.dev/vulnerability/GHSA-r82h-mqw3-fc56","https://github.com/plone/plone.app.event/security/advisories/GHSA-r82h-mqw3-fc56","https://github.com/plone/plone.app.event/commit/1e3c83c15a24d1a789cdb012593505bc5620e28e","https://github.com/plone/plone.app.event/commit/4de5eb3ea9e4f7f1781622e6d64fc086629d1437","https://github.com/plone/plone.app.event","https://github.com/plone/plone.app.event/releases/tag/5.2.4","https://github.com/plone/plone.app.event/releases/tag/6.0.1"],"severity":{"label":"critical","score":9.1},"sources":[{"source":"osv","source_id":"GHSA-r82h-mqw3-fc56","url":"https://osv.dev/vulnerability/GHSA-r82h-mqw3-fc56"}],"summary":"plone.app.event vulnerable to denial of service via iCalendar import"}