Multiple vulnerabilities were discovered in roundcube, a skinnable AJAX
based webmail solution for IMAP servers, which could result in account
takeover, cross-site scripting, SSRF bypass, information disclosure or
denial of service.


https://security-tracker.debian.org/tracker/DSA-6391-1