Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/roundcube@0.7.2-9?distro=trixie
purl pkg:deb/debian/roundcube@0.7.2-9?distro=trixie
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-c196-941x-8kfj Absolute path traversal vulnerability in steps/mail/sendmail.inc in Roundcube Webmail before 0.7.3 and 0.8.x before 0.8.6 allows remote attackers to read arbitrary files via a full pathname in the _value parameter for the generic_message_footer setting in a save-perf action to index.php, as exploited in the wild in March 2013. CVE-2013-1904

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T10:12:01.023961+00:00 Debian Importer Fixing VCID-c196-941x-8kfj https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-13T06:51:21.338689+00:00 Debian Importer Fixing VCID-c196-941x-8kfj https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-03T07:52:06.774285+00:00 Debian Importer Fixing VCID-c196-941x-8kfj https://security-tracker.debian.org/tracker/data/json 38.1.0