GHSA-hcjv-982c-5f29

Easy!Appointments Denial of Service (DoS)

Source: GitHub Advisory Database (reviewed) Moderate CVE-2025-29448

Packages

Ecosystem	Package	Affected	Fixed in
Packagist	alextselegidis/easyappointments	<= 1.5.1	no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

Booking logic flaw in Easy!Appointments v1.5.1 allows unauthenticated attackers to create appointments with excessively long durations, causing a denial of service by blocking all future booking availability.

References

External links from the advisory. They lead to third-party sites.

https://nvd.nist.gov/vuln/detail/CVE-2025-29448 advisory
https://github.com/alextselegidis/easyappointments/commit/74633b60f28bdef3cc9f905c0599cef121fee32b web
https://github.com/Abdullah4eb/CVE-2025-29448 web
https://github.com/alextselegidis/easyappointments package