[Pkg-roundcube-maintainers] Bug#1122899: roundcube: XSS and information disclosure vulnerabilities

Guilhem Moulin guilhem at debian.org
Sun Dec 14 15:20:11 GMT 2025


On Sun, 14 Dec 2025 at 14:32:27 +0100, Salvatore Bonaccorso wrote:
>> AFAICT no CVE-ID have been published for these issues.  Will request
>> them shortly if no one beats me to it.
>
> Not sure if you requested them already, but I have done so now via
> MITRE CNA.

Thanks Salvatore!  I didn't, you were faster :-)

-- 
Guilhem.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-roundcube-maintainers/attachments/20251214/93b2ed5b/attachment.sig>


More information about the Pkg-roundcube-maintainers mailing list