CVE-2025-71389 Blast Radius

CRITICAL • CVSS 10Cal.com (calcom/cal.diy) before 5.9.9 is vulnerable to unauthenticated remote code execution because it bundles a version of Next.js whose React Serve…

Is Your Infrastructure Using These Packages?

EchelonGraph automatically scans your cloud infrastructure and SBOMs to map your exposure to vulnerabilities like CVE-2025-71389.

Start Free Scan →← Back to CVE-2025-71389