Approved changes feed: RSS · Atom

cpe:2.3:a:roundcube:roundcube:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorRoundcube (e9332c9d-8d56-558e-b31a-ef4bbc8643b9)
ProductRoundcube (fab121e0-54a2-5cb8-816a-afd64dd2cf88)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/roundcube purl2cpe 2026-06-01 10:11:31.701258
pkg:deb/ubuntu/roundcube purl2cpe 2026-06-01 10:11:31.701260
pkg:github/roundcube/roundcubemail purl2cpe 2026-06-01 10:11:31.701262
pkg:rpm/fedora/roundcubemail purl2cpe 2026-06-01 10:11:31.701263
pkg:rpm/opensuse/roundcubemail purl2cpe 2026-06-01 10:11:31.701264
pkg:sourceforge/roundcubemail purl2cpe 2026-06-01 10:11:31.701266

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-42010 vulnerable 2026-06-08 06:43:55.977240 Details available
mod_css_styles in Roundcube through 1.5.7 and 1.6.x through 1.6.7 insufficiently filters Cascading Style Sheets (CSS) token sequences in rendered e-mail messages, allowing a remote attacker to obtain sensitive information.
Published: 2024-08-05T00:00:00.000Z
Updated: 2024-08-12T13:42:04.196Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-46144 vulnerable 2026-06-08 05:36:49.776175 Details available
Roundcube before 1.4.13 and 1.5.x before 1.5.2 allows XSS via an HTML e-mail message with crafted Cascading Style Sheets (CSS) token sequences.
Published: 2022-01-06T04:08:32.000Z
Updated: 2024-08-04T05:02:10.965Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.