Unscored DLA-3435-1 2 CVEs

rainloop - security update

Published May 28, 2023 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 10	rainloop	1.12.1-2+deb10u1

Vulnerabilities 2

Unscored —

CVE-2019-13389

RainLoop Webmail before 1.13.0 lacks XSS protection mechanisms such as xlink:href validation, the X-XSS-Protection head…

rainloop Ubuntu

Mar 20, 2020
Unscored —

CVE-2022-29360

The Email Viewer in RainLoop through 1.6.0 allows XSS via a crafted email message.

rainloop Ubuntu

Jul 28, 2022