EV
Vendor
eventschedule
1 product with CVEs on record
1
CVEs
0
On KEV
1
New 30D
Products
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-55190
New
EV
eventschedule
eventschedule
6.5
0%
Oct 23Event Schedule Vulnerable to SSRF: isUrlSafe() bypassable via bracketed IPv6 literals (parse_url keeps the brackets so the IPv6 guard never matches) and a v4-only-resolver fail-open; reaches internal/localhost services on event import