Security Advisory
CVE-2026-44742
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Postorius through 1.3.13 does not escape HTML in the message subject when rendering it in the Held messages pop-up, as exploited in the wild in May 2026.