eventschedule
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| eventschedule | 1 | – | Oct 23, 2026 |
Exploited and recent CVEs
- CVE-2026-55190 Event Schedule Vulnerable to SSRF: isUrlSafe() bypassable via bracketed IPv6 literals (parse_url keeps the brackets so the IPv6 guard never matches) and a v4-only-resolver fail-open; reaches internal/localhost services on event import 0.3%