CVE-2026-9304

CVE-2026-9304 describes a server-side request forgery in calcom cal.diy ≤ 4.9.4 . The flaw is in the function validateUrlForSSRF in the file apps/web/app/api/logo/route.ts of the Logo API component. Exploitation can be remote; exploitability is described as difficult. A public exploit exists. The...

CVE-2026-9304 calcom cal.diy Logo API route.ts validateUrlForSSRF server-side request forgery

A security flaw has been discovered in calcom cal.diy up to 4.9.4. The affected element is the function validateUrlForSSRF of the file apps/web/app/api/logo/route.ts of the component Logo API. The manipulation results in server-side request forgery. It is possible to launch the attack remotely...

EUVD-2026-31540

A security flaw has been discovered in calcom cal.diy up to 4.9.4. The affected element is the function validateUrlForSSRF of the file apps/web/app/api/logo/route.ts of the component Logo API. The manipulation results in server-side request forgery. It is possible to launch the attack remotely...

CVE-2026-9303 calcom cal.diy cross-site request forgery

A vulnerability was identified in calcom cal.diy up to 4.9.4. Impacted is an unknown function. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about this...

CVE-2026-9303 calcom cal.diy cross-site request forgery

A vulnerability was identified in calcom cal.diy up to 4.9.4. Impacted is an unknown function. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about this...

EUVD-2026-31539

A vulnerability was identified in calcom cal.diy up to 4.9.4. Impacted is an unknown function. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about this...

CVE-2026-9303

The CVE-2026-9303 entry concerns calcom cal.diy up to version 4.9.4. The vulnerability affects an unknown function and enables cross-site request forgery. It can be triggered remotely, and a public exploit is available. The vendor was contacted but did not respond. No remediation details are prov...

PT-2026-42884

Name of the Vulnerable Software and Affected Versions calcom cal.diy versions prior to 4.9.5 Description A flaw in the Logo API component allows for server-side request forgery SSRF, a condition where an attacker can induce the server to make requests to an unintended location. The issue resides ...

PT-2026-42883

Name of the Vulnerable Software and Affected Versions calcom cal.diy versions prior to 4.9.5 Description A cross-site request forgery CSRF issue exists in an unknown function, allowing a remote attacker to initiate an attack. CSRF is a type of attack that tricks a victim into performing actions...

CVE-2026-9303: Cross-Site Request Forgery (CSRF)

A vulnerability was identified in calcom cal.diy up to 4.9.4. Impacted is an unknown function. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about this...

EUVD-2023-23876

Malicious code in bioql PyPI...

MAL-2025-16444 Malicious code in calcom-monorepo (npm)

The package calcom-monorepo was found to contain malicious code...

Malicious code in calcom-monorepo (npm)

The package calcom-monorepo was found to contain malicious code...

CVE-2023-1647

Improper Access Control in GitHub repository calcom/cal.com prior to 2.7...

CVE-2023-1647

Improper Access Control in GitHub repository calcom/cal.com prior to 2.7...

Improper access control

Improper Access Control in GitHub repository calcom/cal.com prior to 2.7...

CVE-2023-1647

CVE-2023-1647 affects calcom/cal.com versions prior to 2.7, due to Improper Access Control. Public sources (Red Hat, PRION/PT-Security, OSV/NVD) describe high-severity impact on confidentiality, integrity, and availability. Mitigation: upgrade to version 2.7 or later as recommended by PT-Security...

CVE-2023-1647 Improper Access Control in calcom/cal.com

Improper Access Control in GitHub repository calcom/cal.com prior to 2.7...

CVE-2023-1647 Improper Access Control in calcom/cal.com

Improper Access Control in GitHub repository calcom/cal.com prior to 2.7...

PT-2023-17143 · Unknown · Calcom/Cal.Com

Name of the Vulnerable Software and Affected Versions: calcom/cal.com versions prior to 2.7 Description: The issue is related to improper access control in the GitHub repository calcom/cal.com. Recommendations: For versions prior to 2.7, update to version 2.7 or later to resolve the issue...