Remote Code Execution Vulnerability

I was sent this notice of a vulnerability in this plugin up to version 6.17.4, and I do not see any note of attention to this (unless I missed it) in 6.17.5

https://nvd.nist.gov/vuln/detail/cve-2026-78006

We do not allow comments to events on pur sites, but it still worrisome.