20262026Mar FebMarchMar 18Roundcube round two: three more sanitizer bypassesMar 16Perfex CRM <=3.4.0 allows unauthenticated RCE via insecure deserializationFebruaryFeb 10Hello worldFeb 8Roundcube Webmail <1.5.13 / <1.6.13 allows attackers to force remote image loads via SVG feImage