Skip to content
OpenAdvisories
High DSA-4922-1 1 CVE

hyperkitty - security update

Published May 29, 2021 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 10 hyperkitty 1.2.2-1+deb10u1

Vulnerabilities 1

  • High 7.5

    Exposure of sensitive information to an unauthorized actor in HyperKitty

    An issue was discovered in management/commands/hyperkitty_import.py in HyperKitty through 1.3.4. When importing a private mailing list's archives, these archives are publicly visible for the duration of the import. For example, sensitive information might be …