Vulnerabilities in calcom
7 resultsCVE-2023-1647HIGHImproper Access Control in calcom/cal.comEPSS 0.8%CVE-2025-66489CRITICALCal.com Authentication Bypass via bad TOTP + password checksEPSS 0.8%CVE-2026-9349MEDIUMcalcom cal.diy Generic React API bookings-single-view.getServerSideProps.tsx getServerSideProps information disclosureEPSS 0.4%CVE-2026-23478CRITICALCal.com has an Authentication Bypass via Unvalidated Email in Custom JWT CallbackEPSS 0.4%CVE-2023-37919MEDIUMCal.com not expiring old sessions after enabling 2FAEPSS 0.3%CVE-2026-9304LOWcalcom cal.diy Logo API route.ts validateUrlForSSRF server-side request forgeryEPSS 0.2%CVE-2026-9303MEDIUMcalcom cal.diy cross-site request forgeryEPSS 0.2%