CVE-2025-71063

HIGH

Errands < 46.2.10 - Improper Certificate Validation for CalDAV Servers

Title source: llm

Errands before 46.2.10 does not verify TLS certificates for CalDAV servers.

Core 5

Core References

Third Party Advisory, Mailing List

Patch

Patch

Issue Tracking

Release Notes

CVSS v3 8.2

EPSS 0.0014

EPSS Percentile 3.3%

Attack Vector ADJACENT_NETWORK

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

CWE

CWE-295

Status published

Products (1)

mrvladus/errands < 46.2.10

Published Jan 12, 2026

Tracked Since Feb 18, 2026