EV
Product
eventschedule
1
CVEs
0
On KEV
6.5
Max CVSS
1
New 30D
Severity mix
Critical 0High 0Medium 1Low 0
Watch
Add eventschedule to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-55190 New | 6.5 | Oct 23 | Event Schedule Vulnerable to SSRF: isUrlSafe() bypassable via bracketed IPv6 literals (parse_url keeps the brackets so the IPv6 guard never matches) and a v4-only-resolver fail-open; reaches internal/localhost services on event import Affected: <= 1.0.0 |
Showing 1