CVE-2025-71063
errands: Errands before 46.2.10 does not verify TLS certificates for CalDAV servers.
CVE-2025-71063 is fixed in errands on 1 platform, first by DEBIAN-CVE-2025-71063, released January 12, 2026. It is not reported as exploited. Patch Radar priority: High.
High
CVSS
7.5
high
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0016
4th percentile
Errands before 46.2.10 does not verify TLS certificates for CalDAV servers.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| errands · Debian 13.5 (trixie) | 46.2.8-1+deb13u1 | DEBIAN-CVE-2025-71063 | Jan 12, 2026 |
| errands · Debian 14 | 46.2.10-1 | DEBIAN-CVE-2025-71063 | Jan 12, 2026 |