USN-8097-1

Advisory lineage Upstream: 2 Downstream: 0
Published: 16 Mar 2026, 15:28
Last modified:19 Mar 2026, 06:55

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

16 Mar 2026, 15:28
Published
Vulnerability first disclosed
19 Mar 2026, 06:55
Last Modified
Vulnerability information updated

Description

roundcube vulnerabilities It was discovered that Roundcube Webmail did not properly sanitize the animate tag within SVG documents. An attacker could possibly use this issue to cause a cross-site scripting attack.

Affected Systems

  • ubuntu•roundcube

    < 1.3.6+dfsg.1-1ubuntu0.1~esm6 | < 1.4.3+dfsg.1-1ubuntu0.1~esm6 | < 1.5.0+dfsg.1-2ubuntu0.1~esm5 | < 1.6.6+dfsg-2ubuntu0.1+esm2

References (2)