plone plone.app.portlets

• CVE-2026-57149 Critical 9.9 plone.app.portlets Vulnerable to Remote Code Execution via TALES Injection 0.6%
• CVE-2026-55248 Critical 9.1 plone.app.portlets: Denial of service via RSS feed portlet 0.4%