The mailcow-dockerized email suite has multiple security vulnerabilities in versions prior to 2026-03b, including lack of administrator verification, HTML/JS injection, SQL injection, and improper rendering of user data.
This thread discusses multiple security vulnerabilities in the mailcow-dockerized email suite, highlighting issues such as lack of administrator verification during deletion, HTML/JS injection, SQL injection, and improper rendering of user …