Advisories · Technology
calcom cal.com.
Every CVE that names calcom cal.com among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
calcom cal.com/cal.diy Webhook util.ts createWebhookProcedure authorization
- calcom cal.com
- calcom cal.diy
- Broken access control
- CVSS 5.3 Medium
calcom cal.com/cal.diy Credentials delete credentials.delete privileges management
- calcom cal.com
- calcom cal.diy
- Privilege escalation
- CVSS 10.0 CriticalCritical · CVSS 9+
Cal.com has an Authentication Bypass via Unvalidated Email in Custom JWT Callback
- calcom cal.com
- Broken access control
- CWE-602
- CVSS 9.9 CriticalCritical · CVSS 9+
Cal.com Authentication Bypass via bad TOTP + password checks
- calcom cal.com
- Authentication bypass
- CVSS 6.5 Medium
Cal.com not expiring old sessions after enabling 2FA
- calcom cal.com
- Authentication bypass
- CVSS 8.8 High
Improper Access Control in calcom/cal.com
- calcom/cal.com
- Broken access control