plone-app-portlets
Built from the advisories that name this package: its registry metadata (versions, licence, dependencies) has not been fetched by this service yet.
At a glance
- Ecosystem
- PyPI
- Vulnerability status
- 4 advisory(ies) without a verdict
Advisories (4)
| Advisory | Affected versions | Latest version |
|---|---|---|
| GHSA-rr49-f9g6-c9r5 plone.app.portlets Vulnerable to Remote Code Execution via TALES Injection | 7.0.0 – < 7.0.2 ; 6.0.0 – < 6.0.4 ; 5.0.0 – < 5.0.8 | Undetermined |
| GHSA-x5g3-w747-2h8q plone.app.portlets vulnerable to denial of service via RSS feed portlet | 7.0.0 – < 7.0.2 ; 6.0.0 – < 6.0.4 ; < 5.0.8 | Undetermined |
| PYSEC-2026-3884 plone.app.portlets vulnerable to denial of service via RSS feed portlet | < 5.0.8 ; 6.0.0 – < 6.0.4 ; 7.0.0 – < 7.0.2 | Undetermined |
| PYSEC-2026-4138 plone.app.portlets Vulnerable to Remote Code Execution via TALES Injection | 5.0.0 – < 5.0.8 ; 6.0.0 – < 6.0.4 ; 7.0.0 – < 7.0.2 | Undetermined |
Sources
| Source | Licence |
|---|