CVE-2025-66546

Summary: CVE-2025-66546 affects Nextcloud Calendar. The vulnerability arises from the calendar’s handling of appointment IDs, allowing blind booking of appointments without knowledge of the appointment token. Affected software/versions (as documented): Nextcloud Calendar prior to 4.7.19, prior to...

@pzlr/build-core (>=2.14.0 <=2.15.1-beta.1), @v4fire/cli (>=1.3.0 <=2.1.0) +13 more potentially affected by CVE-2023-26113 via collection.js (>=5.5.6 <=6.7.11)

collection.js NPM version =5.5.6, =2.14.0, =1.3.0, =2.0.0-beta.1, =2.0.0-beta.1, =2.0.0, =6.0.0, =3.0.1, =7.1.0, =2.0.0, =2.0.0, =7.0.10, =7.1.0, =6.0.0, =7.0.0, =7.1.0 Source cves: CVE-2023-26113 Source advisory: OSV:GHSA-47PJ-Q2VM-46XC...