Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2026-25916
4.3
MEDIUMCVSS v3
Published
February 9, 2026
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
Roundcube Webmail before 1.5.13 and 1.6 before 1.6.13, when "Block remote images" is used, does not block SVG feImage.
GitHub