PyPIPackage

postorius

2 known vulnerabilities (1 high), with the versions each affects and the releases that fix them.

Latest release: 1.3.13 (Sep 21, 2024): affected by CVE-2026-44742
Newest unaffected release: Every release is affected by at least one advisory
Advisories: 2 · 1 high

Version timeline

Every release cve.now has on record, lowest version on the left; each bar is a run of versions an advisory affects.

CVE-2026-44742High 7.2
Postorius through 1.3.13 does not escape HTML in the message subject when rendering it in the Held messages pop-up, as exploited in the…
Affected: through 1.3.13.
No fix released. The latest release, 1.3.13, is still affected.
CVE-2021-40347Unrated
An issue was discovered in views/list.py in GNU Mailman Postorius before 1.3.5.
Affected: fixed in 1.3.5.
Fixed in 1.3.5 (released Sep 5, 2021, 5 days before disclosure).
The latest release, 1.3.13, is not affected.