Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:pypi/plone@2.5.5
purl pkg:pypi/plone@2.5.5
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-gxgu-mp2h-hfe1 Plone 2.5 through 2.5.4 and 3.0 through 3.0.2 allows remote attackers to execute arbitrary Python code via network data containing pickled objects for the (1) statusmessages or (2) linkintegrity module, which the module unpickles and executes. CVE-2007-5741
GHSA-hf26-vvmx-x8c8
PYSEC-2007-4

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-02T04:42:12.633812+00:00 GitLab Importer Fixing VCID-gxgu-mp2h-hfe1 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/Plone/CVE-2007-5741.yml 38.6.0
2026-06-02T04:03:06.707420+00:00 Pypa Importer Fixing VCID-gxgu-mp2h-hfe1 https://github.com/pypa/advisory-database/blob/main/vulns/plone/PYSEC-2007-4.yaml 38.6.0