Skip to content
OpenAdvisories
Medium DLA-1442-1 2 CVEs

mailman - security update

Published Jul 24, 2018 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 8 mailman 1:2.1.18-2+deb8u3

Vulnerabilities 2

  • Medium 6.5
    CVE-2018-13796

    Moderate severity vulnerability that affects mailman

    An issue was discovered in GNU Mailman before 2.1.28. A crafted URL can cause arbitrary text to be displayed on a web page from a trusted site.

    mailman mailman Ubuntu PyPI
  • Unscored —
    CVE-2018-0618

    Cross-site scripting vulnerability in Mailman 2.1.26 and earlier allows remote authenticated attackers to inject arbitr…

    GNU Mailman Mailman mailman Ubuntu