Security
فارسی
All products

roundcube/roundcubemail

Composer · Package
10 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Roundcube Webmail: Unsafe deserialization in the redis/memcache session handlerCVE-2026-35537 · GHSA-RXJ3-RRWM-PJ4R roundcube/roundcubemail Composer Low Fix reported
Roundcube Webmail: Remote image blocking feature can be bypassed via SVG content in an e-mail messageCVE-2026-35545 · GHSA-W846-74JR-76CV roundcube/roundcubemail Composer Medium Fix reported
Roundcube Webmail: Insufficient CSS sanitization in HTML e-mail messagesCVE-2026-35544 · GHSA-XPQH-GRPW-4XMG roundcube/roundcubemail Composer Medium Fix reported
Roundcube Webmail: Bypass of remote image blocking via SVG content (with animate attributes) in an e-mail messageCVE-2026-35543 · GHSA-J2G6-8RVG-7MF6 roundcube/roundcubemail Composer Medium Fix reported
Roundcube: Bypass of remote image blocking via crafted BODY background attributeCVE-2026-35542 · GHSA-5HF6-CRG4-FG59 roundcube/roundcubemail Composer Medium Fix reported
Roundcube Webmail: Incorrect password comparison in the password pluginCVE-2026-35541 · GHSA-46PV-MJ2G-93GH roundcube/roundcubemail Composer Medium Fix reported
Roundcube Webmail: Insufficient CSS sanitization in HTML e-mail messagesCVE-2026-35540 · GHSA-VXG2-HHGR-37FX roundcube/roundcubemail Composer Medium Fix reported
Roundcube Webmail: Insufficient HTML attachment sanitization in preview modeCVE-2026-35539 · GHSA-X4Q5-8J5G-HPJC roundcube/roundcubemail Composer Medium Fix reported
Roundcube Webmail: Unsanitized IMAP SEARCH command argumentsCVE-2026-35538 · GHSA-8JR8-V43G-5C57 roundcube/roundcubemail Composer Low Fix reported
Roundcube Webmail Vulnerable to Authenticated RCE via PHP Object DeserializationCVE-2025-49113 · GHSA-8J8W-WWQC-X596 roundcube/roundcubemail Composer Critical Fix reported