Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2026-48848
7.2
HIGHCVSS v3
Published
May 25, 2026
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7 has insufficient HTML sanitization that could lead to Cascading Style Sheets (CSS) injection via an SVG document that has an animate element with the attributeName attribute.
GitHub