← All advisories

Unrated severityOSV Advisory· Published Dec 18, 2025· Updated Dec 18, 2025

CVE-2025-68460

CVE-2025-68460

Description

Roundcube Webmail before 1.5.12 and 1.6 before 1.6.12 is prone to a information disclosure vulnerability in the HTML style sanitizer.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Roundcube/RoundcubemailOSV
Range: 1.1-beta, 1.1-rc, 1.1.0, …
Roundcube/Webmailllm-fuzzy
Range: <1.5.12, 1.6 <1.6.12
osv-coords
pkg:rpm/opensuse/roundcubemail&distro=openSUSE%20Leap%2016.0
Range: < 1.6.13-bp160.1.1

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.