Linagora

7 CVEs in 3 Linagora products, including Twake, Linagora/twake, Hublin. Newest: CVE-2025-70039 (2026-03-09). Severity, EPSS and public exploits for each.

Linagora products with known CVEs

ProductCVEs
Twake6
Linagora/twake3
Hublin1
Linagora CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-70039Critical9.82026-03-09An issue pertaining to CWE-78: Improper Neutralization of Special Elements used in an OS Command was discovered in linagora Twake v2023.Q1.1223.
CVE-2025-70038High8.82026-03-09An issue pertaining to CWE-79: Improper Neutralization of Input During Web Page Generation was discovered in linagora Twake v2023.Q1.1223. This allows attacker…
CVE-2025-70037Medium6.12026-03-09An issue pertaining to CWE-601: URL Redirection to Untrusted Site was discovered in linagora Twake v2023.Q1.1223. This allows attackers to obtain sensitive inf…
CVE-2023-2675Critical9.82023-11-07Improper Restriction of Excessive Authentication Attempts in GitHub repository linagora/twake prior to 2023.Q1.1223.
CVE-2023-1665Critical9.82023-03-27Improper Restriction of Excessive Authentication Attempts in GitHub repository linagora/twake prior to 0.0.0.
CVE-2023-0028Medium5.72023-01-01Cross-site Scripting (XSS) - Stored in GitHub repository linagora/twake prior to 2023.Q1.1200+.
CVE-2019-1010205High7.52019-07-23LINAGORA hublin latest (commit 72ead897082403126bf8df9264e70f0a9de247ff) is affected by: Directory Traversal. The impact is: The vulnerability allows an attack…