[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-25916":6},{"stargazers_count":4,"fetched_at":5},5,"2026-04-07T15:11:42.125Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":19,"aliases":20,"duplicate_of":9,"upstream":21,"downstream":22,"duplicates":33,"related":34,"reserved_at":9,"published_at":38,"modified_at":39,"state":40,"summary":41,"references_raw":50,"kevs":64,"epss":65,"epss_history":68,"metrics":245,"affected":253},"CVE-2026-25916","Roundcube Webmail before 1.5.13 and 1.6 before 1.6.13, when \"Block remote images\" is used, does not block SVG feImage.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":9,"capec":18},"CWE-420","Unprotected Alternate Channel","The product protects a primary channel, but it does not use the same level of protection for an alternate channel.","weakness","Draft","Base",[],[],[],[],[23,25,27,29,31],{"_key":24},"DSA-6137-1",{"_key":26},"DLA-4480-1",{"_key":28},"DEBIAN-CVE-2026-25916",{"_key":30},"OPENSUSE-SU-2026:20323-1",{"_key":32},"UBUNTU-CVE-2026-25916",[],[35,36],{"_key":30},{"_key":37},"MGASA-2026-0065","2026-02-09T08:14:10.177Z","2026-02-09T15:05:40.859Z","Awaiting Analysis",{"cisa_kev":42,"cisa_ransomware":42,"cisa_vendor":9,"epss_severity":43,"epss_score":44,"severity":45,"severity_score":46,"severity_version":47,"severity_source":48,"severity_vector":49,"severity_status":40},false,"low",0.00034,"medium",4.3,"v3.1","cve.org","CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",[51,56,60],{"url":52,"sources":53,"tags":55},"https://nullcathedral.com/posts/2026-02-08-roundcube-svg-feimage-remote-image-bypass/",[48,54],"nvd",[],{"url":57,"sources":58,"tags":59},"https://github.com/roundcube/roundcubemail/commit/26d7677",[48,54],[],{"url":61,"sources":62,"tags":63},"https://news.ycombinator.com/item?id=46937012",[48,54],[],[],{"date":66,"score":44,"percentile":67},"2026-04-07",0.09829,[69,73,76,79,82,85,88,92,95,98,102,105,108,111,114,117,120,123,126,129,132,135,138,141,144,147,150,153,156,159,162,165,168,172,175,178,181,184,187,190,193,196,199,202,205,208,211,215,218,221,224,227,230,233,236,239,242,244],{"date":70,"score":71,"percentile":72},"2026-02-09",0.00028,0.0739,{"date":74,"score":71,"percentile":75},"2026-02-10",0.07372,{"date":77,"score":71,"percentile":78},"2026-02-11",0.07408,{"date":80,"score":71,"percentile":81},"2026-02-12",0.07444,{"date":83,"score":71,"percentile":84},"2026-02-13",0.07368,{"date":86,"score":71,"percentile":87},"2026-02-14",0.0736,{"date":89,"score":90,"percentile":91},"2026-02-15",0.0003,0.08291,{"date":93,"score":90,"percentile":94},"2026-02-16",0.08278,{"date":96,"score":90,"percentile":97},"2026-02-17",0.08244,{"date":99,"score":100,"percentile":101},"2026-02-18",0.00045,0.13855,{"date":103,"score":100,"percentile":104},"2026-02-19",0.13922,{"date":106,"score":100,"percentile":107},"2026-02-20",0.13917,{"date":109,"score":100,"percentile":110},"2026-02-21",0.13924,{"date":112,"score":100,"percentile":113},"2026-02-22",0.1393,{"date":115,"score":100,"percentile":116},"2026-02-23",0.13886,{"date":118,"score":100,"percentile":119},"2026-02-24",0.1387,{"date":121,"score":100,"percentile":122},"2026-02-25",0.13818,{"date":124,"score":100,"percentile":125},"2026-02-26",0.13754,{"date":127,"score":100,"percentile":128},"2026-02-27",0.13763,{"date":130,"score":100,"percentile":131},"2026-02-28",0.13762,{"date":133,"score":100,"percentile":134},"2026-03-01",0.13779,{"date":136,"score":100,"percentile":137},"2026-03-02",0.13716,{"date":139,"score":100,"percentile":140},"2026-03-03",0.13696,{"date":142,"score":100,"percentile":143},"2026-03-04",0.13653,{"date":145,"score":100,"percentile":146},"2026-03-05",0.13671,{"date":148,"score":100,"percentile":149},"2026-03-06",0.13621,{"date":151,"score":100,"percentile":152},"2026-03-07",0.13633,{"date":154,"score":100,"percentile":155},"2026-03-08",0.13616,{"date":157,"score":100,"percentile":158},"2026-03-09",0.13581,{"date":160,"score":100,"percentile":161},"2026-03-10",0.13583,{"date":163,"score":100,"percentile":164},"2026-03-11",0.13615,{"date":166,"score":100,"percentile":167},"2026-03-12",0.13667,{"date":169,"score":170,"percentile":171},"2026-03-13",0.00049,0.15116,{"date":173,"score":170,"percentile":174},"2026-03-14",0.15121,{"date":176,"score":170,"percentile":177},"2026-03-15",0.15071,{"date":179,"score":170,"percentile":180},"2026-03-16",0.15034,{"date":182,"score":170,"percentile":183},"2026-03-17",0.15013,{"date":185,"score":170,"percentile":186},"2026-03-18",0.1502,{"date":188,"score":170,"percentile":189},"2026-03-19",0.15043,{"date":191,"score":170,"percentile":192},"2026-03-20",0.15109,{"date":194,"score":170,"percentile":195},"2026-03-21",0.1525,{"date":197,"score":170,"percentile":198},"2026-03-22",0.15241,{"date":200,"score":170,"percentile":201},"2026-03-23",0.15186,{"date":203,"score":170,"percentile":204},"2026-03-24",0.15182,{"date":206,"score":170,"percentile":207},"2026-03-25",0.15275,{"date":209,"score":170,"percentile":210},"2026-03-26",0.15362,{"date":212,"score":213,"percentile":214},"2026-03-27",0.00041,0.12427,{"date":216,"score":213,"percentile":217},"2026-03-28",0.12449,{"date":219,"score":213,"percentile":220},"2026-03-29",0.12417,{"date":222,"score":213,"percentile":223},"2026-03-30",0.12385,{"date":225,"score":213,"percentile":226},"2026-03-31",0.12333,{"date":228,"score":213,"percentile":229},"2026-04-01",0.12335,{"date":231,"score":213,"percentile":232},"2026-04-02",0.12448,{"date":234,"score":213,"percentile":235},"2026-04-03",0.12457,{"date":237,"score":213,"percentile":238},"2026-04-04",0.12491,{"date":240,"score":44,"percentile":241},"2026-04-05",0.09924,{"date":243,"score":44,"percentile":67},"2026-04-06",{"date":66,"score":44,"percentile":67},[246,251],{"source":48,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":247,"cvss_v4_0":9},{"baseScore":46,"baseSeverity":248,"vectorString":49,"impactScore":249,"exploitabilityScore":250},"MEDIUM",2.3,7.2,{"source":54,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":252,"cvss_v4_0":9},{"baseScore":46,"baseSeverity":248,"vectorString":49,"impactScore":249,"exploitabilityScore":250},[254],{"ecosystem":9,"name":255,"vendor":9,"product":255,"cpe_part":9,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":256},"Webmail",[257,262],{"version":258,"is_range":259,"range_type":48,"version_start":9,"version_start_type":9,"version_end":260,"version_end_type":261,"fixed_in":9},"\u003C 1.5.13",true,"1.5.13","excluding",{"version":263,"is_range":259,"range_type":48,"version_start":264,"version_start_type":265,"version_end":266,"version_end_type":261,"fixed_in":9},">= 1.6.0, \u003C 1.6.13","1.6.0","including","1.6.13"]