Skip to main content
cve.nowby Sazabi
← PyPI
PyPIPackage

plone-app-portlets

2 known vulnerabilities (2 critical), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
2 · 2 critical
Weekly downloads
11.7K
Dependents
442
Registry
PyPI

Advisories 2

  • CVE-2026-57149Critical 9.9

    plone.app.portlets Vulnerable to Remote Code Execution via TALES Injection

    Affected: from 5.0.0, fixed in 5.0.8; from 6.0.0, fixed in 6.0.4; from 7.0.0, fixed in 7.0.2; from 5.0.0, fixed in 5.0.8; from 7.0.0, fixed in 7.0.2; from 6.0.0, fixed in 6.0.4; from 5.0.0, fixed in 5.0.8.

  • CVE-2026-55248Critical 9.1

    plone.app.portlets: Denial of service via RSS feed portlet

    Affected: from 7.0.0, fixed in 7.0.2; from 6.0.0, fixed in 6.0.4; fixed in 5.0.8; fixed in 5.0.8; from 6.0.0, fixed in 6.0.4; from 7.0.0, fixed in 7.0.2.