PL
Product
plone.app.portlets
2
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 2High 0Medium 0Low 0
Watch
Add plone.app.portlets to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-57149 | 9.9 | Sep 22 | plone.app.portlets Vulnerable to Remote Code Execution via TALES Injection Affected: >= 7.0.0, < 7.0.2; >= 6.0.0, < 6.0.4; >= 5.0.0, < 5.0.8 |
| CVE-2026-55248 | 9.1 | Aug 28 | plone.app.portlets: Denial of service via RSS feed portlet Affected: < 5.0.8; >= 6.0.0, < 6.0.4; >= 7.0.0, < 7.0.2 |
Showing 2