Which function in alextselegidis/easyappointments has been patched by the most CVEs?

assert_safe_caldav_url in application/libraries/Caldav_sync.php has been changed by 2 CVE fixes, from 2026 to 2026.

How large is a typical CVE fix in alextselegidis/easyappointments?

The median fix changes 24 lines. 42% of fixes change 20 lines or fewer, and 47% change a single function.

How is a fix located to a function?

The upstream fix commit for each CVE is fetched and its diff is split into hunks. Each hunk is attributed to the function, method or type it changes, using the definition the diff itself names. Backports of the same fix to stable branches are counted once.

RadicalNotion.AI

Log in Create an account

php

javascript

#281 of 500 repositories

alextselegidis/easyappointments

Name: alextselegidis/easyappointments: functions patched by CVE fixes
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

Functions and files changed by CVE fixes in this repository.

Latest located fix October 11, 2026

19

CVE fixes located

Published CVEs

57

Functions patched

Distinct function sites

44

Files patched

Distinct source files

2022–2026

Years covered

By CVE publication date

Overview

19 published CVEs have a fix traced to functions in alextselegidis/easyappointments, the earliest published in 2022. Those fixes changed 57 distinct functions across 44 files, in 197 patch hunks.

Among the 500 repositories tracked here, alextselegidis/easyappointments ranks #281 by the number of CVEs with a located fix.

Most patched functions

Functions in alextselegidis/easyappointments changed by the most CVE fixes.

Most patched files

Files in alextselegidis/easyappointments changed by the most CVE fixes.

1application/controllers/Calendar.php3 CVEs · 6 functions
2application/controllers/Booking.php3 CVEs · 2 functions
3application/libraries/Caldav_sync.php2 CVEs · 4 functions
4application/models/Appointments_model.php2 CVEs · 3 functions
5application/controllers/Caldav.php2 CVEs · 2 functions
6application/controllers/api/v1/Appointments_api_v1.php1 CVEs · 2 functions
7application/controllers/Appointments.php1 CVEs · 2 functions
8application/models/Admins_model.php1 CVEs · 2 functions
9application/models/Blocked_periods_model.php1 CVEs · 2 functions
10application/models/Consents_model.php1 CVEs · 2 functions

Fix size

How much code a CVE fix in alextselegidis/easyappointments changes, with backports counted once.

24

Median lines changed

Added plus removed, per CVE

42%

Fixes of 20 lines or fewer

Share of CVE fixes

47%

Fixes in a single function

Share of CVE fixes

Latest CVEs

The most recently published CVEs with a fix located in alextselegidis/easyappointments, and the functions each fix changed.

Easy!Appointments through 1.6.0 Authorization Bypass via booking/register Endpoint
CVE-2026-108758register
High · CVSS 8.8
EPSS 0.3%2026-10-11
Easy!Appointments Vulnerable to Appointments Takeover via Excessive Data Exposure
CVE-2026-55651search
High · CVSS 7.1
EPSS 0.3%2026-07-14
Easy!Appointments: Authorization bypass in Google OAuth provider binding lets any backend user rebind a peer provider's Google sync
CVE-2026-52841oauth_callback
Low · CVSS 3.1
EPSS 0.2%2026-07-14
Easy!Appointments has server-side request forgery in CalDAV connection test that exposes the deployment's internal network
CVE-2026-52840assert_safe_caldav_url __construct connect_to_server
Low · CVSS 2.7
EPSS 0.3%2026-07-14
Easy!Appointments appointments/store and appointments/update allow cross-provider appointment injection — Authorization Bypass
CVE-2026-52839assert_safe_caldav_url store connect_to_server
Low · CVSS 3.3
EPSS 0.2%2026-07-14
Easy!Appointments disable_booking_message rendered as raw HTML on public booking page — Stored XSS
CVE-2026-52838save
Low · CVSS 2.6
EPSS 0.2%2026-07-14
Easy!Appointments has unauthenticated customer PII disclosure on booking reschedule page
CVE-2026-52837index
Medium · CVSS 6.9
EPSS 0.6%2026-07-14
Easy!Appointments SQL injection vulnerability
CVE-2025-50383get search
Medium · CVSS 5.7
EPSS 0.4%2025-08-25
Easy!Appointments Denial of Service (DoS)
CVE-2025-29448calculate_end_datetime register store
Medium · CVSS 5.5
EPSS 0.6%2025-05-07
Authorization Bypass Through User-Controlled Key in alextselegidis/easyappointments
CVE-2023-3700check_event_permissions save_appointment save_unavailability
Medium · CVSS 6.3
EPSS 0.4%2023-07-17
Open Redirect in alextselegidis/easyappointments
CVE-2023-3568check_event_permissions save_appointment save_unavailability
Medium · CVSS 6.3
EPSS 0.4%2023-07-10
Cross-site Scripting (XSS) - Stored in alextselegidis/easyappointments
CVE-2023-2103
Medium · CVSS 5.4
EPSS 0.5%2023-04-15

Get an alert for each new alextselegidis/easyappointments CVE, with the patched functions and AI-written analysis.

Monitor easyappointments CVEs

Other repositories

Repositories with a similar number of located CVE fixes.

1Panel-dev/MaxKB19 CVEs baserproject/basercms19 CVEs bookstackapp/bookstack19 CVEs cloudfoundry/uaa19 CVEs debian/dovecot19 CVEs debian/nginx19 CVEs debian/openimageio19 CVEs denoland/deno19 CVEs

Browse all repositories

Frequently asked questions

Common questions about CVE fixes in alextselegidis/easyappointments.

How many CVEs have a located fix in alextselegidis/easyappointments?: 19 published CVEs have a fix traced to functions in alextselegidis/easyappointments, touching 57 functions across 44 files.
Which function in alextselegidis/easyappointments has been patched by the most CVEs?: assert_safe_caldav_url in application/libraries/Caldav_sync.php has been changed by 2 CVE fixes, from 2026 to 2026.
How large is a typical CVE fix in alextselegidis/easyappointments?: The median fix changes 24 lines. 42% of fixes change 20 lines or fewer, and 47% change a single function.
How is a fix located to a function?: The upstream fix commit for each CVE is fetched and its diff is split into hunks. Each hunk is attributed to the function, method or type it changes, using the definition the diff itself names. Backports of the same fix to stable branches are counted once.

References

Fix locations are computed by RadicalNotion.AI from the upstream patch diff of each CVE. CVE data is sourced from the CVE Program.

Track alextselegidis/easyappointments CVEs

Get an alert when a new CVE lands in this repository, with the patched functions and AI-written remediation guidance.

Create an account See pricing