plone-app-portlets
PyPI2 known CVEs affecting this package
Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.
CVEs affecting plone-app-portletspage 1 of 1
- CVE-2026-55248CRITICALCVSS 9.1EG 9.1fixed in 7.0.2, 6.0.4 or 5.0.8, by version range2026-08-28
vulnerable: 1.0 ... 7.0.1 (158 versions)
plone.app.portlets provides portlets and a Plone-specific user interface for plone.portlets. Prior to 5.0.8, 6.0.4, and 7.0.2, a member who can add an RSS portlet can set its feed URL to a very large response, causing src/plone/app/portlet…
- CVE-2026-57149CRITICALCVSS 9.9EG 9.9fixed in 7.0.2, 6.0.4 or 5.0.8, by version range2026-09-22
vulnerable: 5.0.0 ... 7.0.1 (14 versions)
plone.app.portlets.portlets provides a Plone-specific user interface for plone.portlets, as well as a standard set of portlets that ship with Plone. Starting in version 5.0.0 and prior to versions 5.0.8, 6.0.4, and 7.0.2, the Classic portl…
Check whether plone-app-portlets is used in your infrastructure
EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for plone-app-portlets CVEs against the assets you own.
Book a Demo →