<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: calcom-cal-diy</title><description>Every new CVE for calcom-cal-diy.</description><link>https://agentprime.io/</link><item><title>CVE-2026-112043: calcom cal.com/cal.diy Webhook util.ts createWebhookProcedure authorization</title><link>https://agentprime.io/advisories/CVE-2026-112043/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-112043/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 19 Oct 2026 02:30:14 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-109143: calcom cal.com/cal.diy Credentials delete credentials.delete privileges management</title><link>https://agentprime.io/advisories/CVE-2026-109143/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-109143/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 13 Oct 2026 09:00:16 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-104054: calcom cal.diy PBAC Permission BookingAccessService.ts doesUserIdHaveAccessToBooking authorization</title><link>https://agentprime.io/advisories/CVE-2026-104054/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-104054/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 02 Oct 2026 02:00:11 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-71389: Cal.com before 5.9.9 Remote Code Execution via RSC</title><link>https://agentprime.io/advisories/CVE-2025-71389/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-71389/</guid><description>CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 23 Jul 2026 21:16:44 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2024-58355: Cal.com through 4.7.15 Cross-Site Scripting via booking questions</title><link>https://agentprime.io/advisories/CVE-2024-58355/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-58355/</guid><description>CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 23 Jul 2026 21:16:44 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2024-58354: cal.com Repository Takeover via pull_request_target Workflow</title><link>https://agentprime.io/advisories/CVE-2024-58354/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-58354/</guid><description>CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 23 Jul 2026 21:16:43 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-58353: Cal.com through 4.7.15 Cross-Site Scripting via booking questions</title><link>https://agentprime.io/advisories/CVE-2024-58353/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-58353/</guid><description>CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 23 Jul 2026 21:16:42 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-63768: cal.diy 6.2.0 Conferencing OAuth Callback Open Redirect via Unsigned State</title><link>https://agentprime.io/advisories/CVE-2026-63768/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-63768/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 20 Jul 2026 19:08:21 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-9349: calcom cal.diy Generic React API bookings-single-view.getServerSideProps.tsx getServerSideProps information disclosure</title><link>https://agentprime.io/advisories/CVE-2026-9349/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-9349/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 24 May 2026 02:30:11 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-9304: calcom cal.diy Logo API route.ts validateUrlForSSRF server-side request forgery</title><link>https://agentprime.io/advisories/CVE-2026-9304/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-9304/</guid><description>CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 23 May 2026 13:45:08 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-9303: calcom cal.diy cross-site request forgery</title><link>https://agentprime.io/advisories/CVE-2026-9303/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-9303/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 23 May 2026 13:30:10 GMT</pubDate><category>CVE</category></item></channel></rss>