calcom cal.com vulnerabilities

CVEs per yearBy the year they were published

1. 20231
2. 20251
3. 20263

Newest CVEs

• CVE-2026-112043

  calcom cal.com/cal.diy Webhook util.ts createWebhookProcedure authorization

  calcom · cal.com

  Medium5.3
• CVE-2026-109143

  calcom cal.com/cal.diy Credentials delete credentials.delete privileges management

  calcom · cal.com

  Medium5.3
• CVE-2026-23478

  Cal.com has an Authentication Bypass via Unvalidated Email in Custom JWT Callback

  calcom · cal.com

  Critical10.0
• CVE-2025-66489

  Cal.com Authentication Bypass via bad TOTP + password checks

  calcom · cal.com

  Critical9.9
• CVE-2023-37919

  Cal.com not expiring old sessions after enabling 2FA

  calcom · cal.com

  Medium6.5