Postorius_project Postorius
2 CVEs affecting Postorius_project Postorius. Latest disclosed: 2026-05-07. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-44742 | High | 7.2 | 2026-05-07 | Postorius through 1.3.13 does not escape HTML in the message subject when rendering it in the Held messages pop-up, as exploited in the wild in May 2026. |
CVE-2021-40347 | Medium | 5.4 | 2021-09-10 | An issue was discovered in views/list.py in GNU Mailman Postorius before 1.3.5. An attacker (logged into any account) can send a crafted POST request to unsubs… |