Vulnerability Database - OSV

CVE-2026-57149

github.com/plone/plone.app.portlets

plone.app.portlets Vulnerable to Remote Code Execution via TALES Injection 22 Sep

Fix available
Severity - 9.9 (Critical)

CVE-2026-55248

github.com/plone/plone.app.portlets

plone.app.portlets: Denial of service via RSS feed portlet 28 Aug

Fix available
Severity - 9.1 (Critical)