Nextcloud Calendar vulnerabilities

• nextcloud calendar, kiteworks security-advisories +1 more Nextcloud: Calendar app leaked user identifiers via attendee suggestion endpoint CVE-2026-45286 4.3 MediumJune 1, 2026
• nextcloud calendar, kiteworks security-advisories +1 more Nextcloud Calendar attachments of local files are offered to downloaded CVE-2025-66550 5.7 MediumDecember 5, 2025
• nextcloud calendar, kiteworks security-advisories +1 more Nextcloud Calendar app allowed booking appointments without the generated token CVE-2025-66546 3.3 LowDecember 5, 2025
• nextcloud calendar, kiteworks security-advisories +1 more Nextcloud Calendar app used predictable proposal participant tokens CVE-2025-66511 4.8 MediumDecember 5, 2025
• nextcloud calendar, kiteworks security-advisories +1 more Nextcloud Calendar's event create can create attachments that link to other websites CVE-2024-37316 4.6 MediumJune 14, 2024
• nextcloud calendar, kiteworks security-advisories +1 more Calendar app returns full stacktrace when an error happens while editing appointment CVE-2023-48308 3.5 LowDecember 21, 2023
• nextcloud calendar, kiteworks security-advisories +1 more Inviting excessive long email addresses to a calendar event makes the Nextcloud server unresponsive CVE-2023-45150 4.3 MediumOctober 16, 2023
• nextcloud calendar, kiteworks security-advisories +1 more Error in calendar when booking an appointment reveals the full path of the website CVE-2023-33183 2.6 LowMay 30, 2023
• nextcloud calendar, kiteworks security-advisories +1 more Command Injection in Appointment Emails for Nextcloud Calendar CVE-2022-24838 EPSS 33.0% 5.3 MediumApril 11, 2022
• nextcloud calendar, calendar application +1 more In Nextcloud Calendar before 1.5.8 and 1.6.1, a missing sanitization of search results for an... CVE-2018-3763 4.8 MediumJuly 5, 2018