Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2026-26079
4.7
MEDIUMCVSS v3
Published
February 11, 2026
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
Roundcube Webmail before 1.5.13 and 1.6 before 1.6.13 allows Cascading Style Sheets (CSS) injection, e.g., because comments are mishandled.
GitHub