CVE-2024-23054: Plone Docker Official Image

Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days.

An issue in Plone Docker Official Image 5.2.13 (5221) open-source software that could allow for remote code execution due to a package listed in ++plone++static/components not existing in the public package index (npm).

Affected products

• Plone Plone Docker Official Image: version 5.2.13 only

Published 2024-02-05. Last modified 2026-07-09.