79 matches found
PT-2026-80587
These are all security issues fixed in the postorius-1.3.13-8.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11539-1 postorius-1.3.13-8.1 on GA media
These are all security issues fixed in the postorius-1.3.13-8.1 package on the GA media of openSUSE Tumbleweed...
Postorius is vulnerable to XSS
Postorius through 1.3.13 does not escape HTML in the message subject when rendering it in the Held messages pop-up, as exploited in the wild in May 2026...
PYSEC-2026-2891 Postorius is vulnerable to XSS
Postorius through 1.3.13 does not escape HTML in the message subject when rendering it in the Held messages pop-up, as exploited in the wild in May 2026...
[SECURITY] Fedora 43 Update: python-postorius-1.3.13-1.fc43
The Postorius Django app provides a web user interface to access GNU Mailman...
Fedora 44 : python-postorius (2026-ef34f94241)
"The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-ef34f94241 advisory. Update to 1.3.13 minor packaging changes %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from Fedo...
Fedora 43 : python-postorius (2026-c2b475c5f1)
"The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-c2b475c5f1 advisory. Update to 1.3.13 minor packaging changes %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from Fedo...
Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.10 / 26.04 LTS : Postorius vulnerability (USN-8323-1)
The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.10 / 26.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8323-1 advisory. It was discovered that Postorius did not properly escape HTML in message subjects when rendering the Held...
USN-8323-1 postorius vulnerability
It was discovered that Postorius did not properly escape HTML in message subjects when rendering the Held messages pop-up. An attacker could possibly use this issue to inject arbitrary HTML, resulting in exposure of sensitive information...
USN-8323-1: Postorius vulnerability
It was discovered that Postorius did not properly escape HTML in message subjects when rendering the Held messages pop-up. An attacker could possibly use this issue to inject arbitrary HTML, resulting in exposure of sensitive information...
Debian dla-4600 : python3-django-postorius - security update
The remote Debian 11 host has a package installed that is affected by a vulnerability as referenced in the dla-4600 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4600-1 [email protected] https://www.debian.org/lts/security/...
[SECURITY] [DLA 4600-1] postorius security update
Debian LTS Advisory DLA-4600-1 [email protected] https://www.debian.org/lts/security/ Daniel Leidert May 25, 2026 https://wiki.debian.org/LTS Package : postorius Version : 1.3.4-2+deb11u2 CVE ID : CVE-2026-44742 Debian Bug : 1136003 A vulnerability has been discovered in postorius, a we...
CVE-2026-44742
A flaw was found in Postorius. This vulnerability allows an attacker to embed malicious code within the subject of an email message. When an administrator or user views the 'Held messages pop-up', this malicious code is executed in their web browser. This can lead to Cross-Site Scripting XSS,...
FreeBSD : postorius -- XSS (5b3b7f60-4de9-11f1-873e-0f64d023d0c7)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 5b3b7f60-4de9-11f1-873e-0f64d023d0c7 advisory. NIST reports: Postorius through 1.3.13 does not escape HTML in the message subject when rendering it in...
SUSE CVE-2026-44742
Postorius through 1.3.13 does not escape HTML in the message subject when rendering it in the Held messages pop-up, as exploited in the wild in May 2026...
[SECURITY] [DSA 6257-1] postorius security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6257-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 08, 2026 https://www.debian.org/security/faq -...
Debian dsa-6257 : python3-django-postorius - security update
The remote Debian 12 / 13 host has a package installed that is affected by a vulnerability as referenced in the dsa-6257 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6257-1 [email protected] https://www.debian.org/security/...
Postorius is vulnerable to XSS
Postorius through 1.3.13 does not escape HTML in the message subject when rendering it in the Held messages pop-up, as exploited in the wild in May 2026...
