Skip to content
OpenAdvisories
Unscored DSA-4108-1 1 CVE

mailman - security update

Published Feb 9, 2018 · Updated Mar 9, 2026

Fixed packages 2

ReleasePackageFixed in
Debian · 8 mailman 1:2.1.18-2+deb8u2
Debian · 9 mailman 1:2.1.23-1+deb9u2

Vulnerabilities 1

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the web UI in Mailman before 2.1.26 allows remote attackers to inject arbit…