CVE-2026-44742
Postorius through 1.3.13 does not escape HTML in the message subject when rendering it in the Held messages pop-up, as exploited in the wild in May 2026.
- Actualiza a 1.3.8-3+deb12u1
Publicación Actualización
PatchFirst · Vulnerabilidades recientes
Vulnerabilidades de postorius
Vulnerabilidades publicadas para postorius en los últimos 30 días: 0. Incluidas en el catálogo KEV: 0.
Vulnerabilidades: 2
CVE-2021-40347
An issue was discovered in views/list.py in GNU Mailman Postorius before 1.3.5. An attacker (logged into any account) can send a crafted POST request to unsubscribe any user from a mailing list, also revealing whether that address was subscribed in the first place.
- Actualiza a 1.3.5-1
Publicación Actualización
Comprueba tu servidor
Compara tu pila y las versiones instaladas con las bases actuales de vulnerabilidades.