plone-app-portlets vulnerabilities (PyPI)

2 vulnerabilities.

• plone-app-portlets PyPI plone.app.portlets Vulnerable to Remote Code Execution via TALES Injection CVE-2026-57149 Fix available 9.9 CriticalSeptember 22, 2026
• plone-app-portlets PyPI plone.app.portlets: Denial of service via RSS feed portlet CVE-2026-55248 Fix available 9.1 CriticalAugust 28, 2026