CVE-2026-44742
Postorius through 1.3.13 does not escape HTML in the message subject when rendering it in the Held messages pop-up, as exploited in the wild in May 2026.
- Update to 1.3.10-1ubuntu0.1~esm1
Published Updated
PatchFirst · Latest vulnerabilities
Vulnerabilities published for postorius in the last 30 days: 0. Listed in the KEV catalogue: 0.
Vulnerability: 1
Postorius through 1.3.13 does not escape HTML in the message subject when rendering it in the Held messages pop-up, as exploited in the wild in May 2026.
Check your installed stack and versions against the current vulnerability feeds.