evolution-data-server vulnerabilities
CVEs whose affected-version data names the evolution-data-server package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-110777Medium· 5.7A flaw was found in evolution-data-server
A flaw was found in evolution-data-server. Calendar events containing a file:// URI in their ATTACH property automatically read the targeted local file, base64-encode its contents and upload it back to the server when the event is saved.…
▾ SunlitGNOME · evolution-data-serverEPSS 0.37%via NVD
CVE-2026-2604Medium· 5.6PoCA flaw was found in evolution-data-server
A flaw was found in evolution-data-server. Inconsistent comparison logic in the addressbook file backend allows a Flatpak application with D-Bus access to craft a malicious URI containing directory traversal sequences. This URI is stored…
▾ TwilightGNOME · Evolution Data ServerEPSS 0.28%via NVD