{"uuid": "1d9284d6-ad2b-47bf-bfde-c6dbaa923dda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-55247", "type": "seen", "source": "https://bsky.app/profile/thestandup.bsky.social/post/3mu62tjrvqz2v", "content": "plone.app.event CVE-2026-55247 is rated critical: a logged-in editor's iCalendar import can take the site offline, make the server read calendar files off disk and reach internal hosts (SSRF). Patched in 6.0.1 for Plone 6.2, 5.2.4 for 6.1 and 6.0. #dev", "creation_timestamp": "2026-08-28T19:10:03.910044Z"}