Unclaimed project

Are you a maintainer of roundcubemail? Claim this project to take control of your public changelog and roadmap.

Changelog

roundcubemail

The Roundcube Webmail suite

roundcube/roundcubemail·

7.1k1.8kPHP

·Website

Last updated about 23 hours ago

Back to changelog

NewFebruary 8, 2026

Roundcube Webmail 1.6.13

This is a security update to the stable version 1.6 of Roundcube Webmail. It provides fixes to recently reported security vulnerabilities:

Fix CSS injection vulnerability reported by CERT Polska.
Fix remote image blocking bypass via SVG content reported by nullcathedral.

This version is considered stable and we recommend to update all productive installations of Roundcube 1.6.x with it. Please do backup your data before updating!

CHANGELOG

Managesieve: Fix handling of string-list format values for date tests in Out of Office (#10075)
Fix CSS injection vulnerability reported by CERT Polska.
Fix remote image blocking bypass via SVG content reported by nullcathedral.

More PHP Projects

SecLists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

72.3k

PHP

coolify

An open-source, self-hostable PaaS alternative to Vercel, Heroku & Netlify that lets you easily deploy static sites, databases, full-stack applications and 280+ one-click services on your own servers.

59.0k

PHP

server

☁️ Nextcloud server, a safe home for all your data

36.2k

PHP

framework

Laravel is a web application framework with expressive, elegant syntax.

34.9k

PHP

View all PHP projects →

Roundcube Webmail 1.6.13 - roundcubemail Release Notes | AnnounceHQ