Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/roundcube@0.9.4-1?distro=trixie
purl pkg:deb/debian/roundcube@0.9.4-1?distro=trixie
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-qr2m-f4yw-qqa5 Multiple cross-site scripting (XSS) vulnerabilities in Roundcube webmail before 0.9.3 allow user-assisted remote attackers to inject arbitrary web script or HTML via the body of a message visited in (1) new or (2) draft mode, related to compose.inc; and (3) might allow remote authenticated users to inject arbitrary web script or HTML via an HTML signature, related to save_identity.inc. CVE-2013-5645

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T12:03:37.562413+00:00 Debian Importer Fixing VCID-qr2m-f4yw-qqa5 https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-13T08:14:27.267246+00:00 Debian Importer Fixing VCID-qr2m-f4yw-qqa5 https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-03T07:52:06.820385+00:00 Debian Importer Fixing VCID-qr2m-f4yw-qqa5 https://security-tracker.debian.org/tracker/data/json 38.1.0