How many CVEs have a located fix in Alinto/sogo?

16 published CVEs have a fix traced to functions in Alinto/sogo, touching 0 functions across 18 files.

How large is a typical CVE fix in Alinto/sogo?

The median fix changes 40 lines. 44% of fixes change 20 lines or fewer, and 75% change a single function.

How is a fix located to a function?

The upstream fix commit for each CVE is fetched and its diff is split into hunks. Each hunk is attributed to the function, method or type it changes, using the definition the diff itself names. Backports of the same fix to stable branches are counted once.

RadicalNotion.AI

Log in Create an account

objective-c

c

#350 of 500 repositories

Alinto/sogo

Name: Alinto/sogo: functions patched by CVE fixes
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

Functions and files changed by CVE fixes in this repository.

Latest located fix September 17, 2026

16

CVE fixes located

Published CVEs

0

Functions patched

Distinct function sites

18

Files patched

Distinct source files

2022–2026

Years covered

By CVE publication date

Overview

16 published CVEs have a fix traced to functions in Alinto/sogo, the earliest published in 2022. Those fixes changed 0 distinct functions across 18 files, in 136 patch hunks.

Among the 500 repositories tracked here, Alinto/sogo ranks #350 by the number of CVEs with a located fix.

Most patched files

Files in Alinto/sogo changed by the most CVE fixes.

1SoObjects/SOGo/NSString+Utilities.m4 CVEs · 0 functions
2SoObjects/SOGo/SQLSource.m4 CVEs · 0 functions
3UI/MainUI/SOGoRootPage.m4 CVEs · 0 functions
4SoObjects/Mailer/SOGoMailBodyPart.m1 CVEs · 0 functions
5SoObjects/SOGo/SOGoSystemDefaults.h1 CVEs · 0 functions
6SoObjects/SOGo/SOGoSystemDefaults.m1 CVEs · 0 functions

7SoObjects/SOGo/SOGoUserDefaults.m1 CVEs · 0 functions

8SoObjects/SOGo/SOGoUser.h1 CVEs · 0 functions

9SoObjects/SOGo/SOGoUser.m1 CVEs · 0 functions

10SoObjects/SOGo/SOGoUserSettings.h1 CVEs · 0 functions

Fix size

How much code a CVE fix in Alinto/sogo changes, with backports counted once.

40

Median lines changed

Added plus removed, per CVE

44%

Fixes of 20 lines or fewer

Share of CVE fixes

75%

Fixes in a single function

Share of CVE fixes

Latest CVEs

The most recently published CVEs with a fix located in Alinto/sogo, and the functions each fix changed.

SOGo before 5.12.11 Password Reset Token Interception via Origin Header
CVE-2026-93453
High · CVSS 8.7
EPSS 0.5%2026-09-17
CVE-2026-39178
CVE-2026-39178
Medium · CVSS 6.3
EPSS 0.3%2026-07-08
CVE-2026-39179
CVE-2026-39179
Medium · CVSS 6.3
EPSS 0.3%2026-07-08
CVE-2026-46446
CVE-2026-46446
High · CVSS 7.1
EPSS 0.4%2026-05-14
CVE-2026-46445
CVE-2026-46445
High · CVSS 7.1
EPSS 0.4%2026-05-14
A cross-site scripting (XSS) vulnerability in Alinto SOGo, version 5.12.7
CVE-2026-8496
Medium · CVSS 6.1
EPSS 0.5%2026-05-13
CVE-2026-33550
CVE-2026-33550
Low · CVSS 2.6
EPSS 0.2%2026-03-22
CVE-2025-71276
CVE-2025-71276
Medium · CVSS 6.4
EPSS 0.1%2026-03-22
Alinto SOGo cross site scripting
CVE-2026-3054
Medium · CVSS 5.3
EPSS 0.5%2026-02-24
CVE-2025-63499
CVE-2025-63499
Medium · CVSS 6.1
EPSS 0.3%2025-12-04
CVE-2025-63498
CVE-2025-63498
Medium · CVSS 6.1
EPSS 0.3%2025-11-24
CVE-2024-24510
CVE-2024-24510
Medium · CVSS 6.1
EPSS 0.5%2024-09-09

Get an alert for each new Alinto/sogo CVE, with the patched functions and AI-written analysis.

Monitor sogo CVEs

Other repositories

Repositories with a similar number of located CVE fixes.

android.googlesource.com/platform-system-bt16 CVEs argoproj/argo-workflows16 CVEs codeigniter4/CodeIgniter416 CVEs debian/libmatio16 CVEs debian/libvncserver16 CVEs debian/netatalk16 CVEs debian/nss16 CVEs debian/poppler16 CVEs

Browse all repositories

Frequently asked questions

Common questions about CVE fixes in Alinto/sogo.

How many CVEs have a located fix in Alinto/sogo?: 16 published CVEs have a fix traced to functions in Alinto/sogo, touching 0 functions across 18 files.
How large is a typical CVE fix in Alinto/sogo?: The median fix changes 40 lines. 44% of fixes change 20 lines or fewer, and 75% change a single function.
How is a fix located to a function?: The upstream fix commit for each CVE is fetched and its diff is split into hunks. Each hunk is attributed to the function, method or type it changes, using the definition the diff itself names. Backports of the same fix to stable branches are counted once.

References

Fix locations are computed by RadicalNotion.AI from the upstream patch diff of each CVE. CVE data is sourced from the CVE Program.

Track Alinto/sogo CVEs

Get an alert when a new CVE lands in this repository, with the patched functions and AI-written remediation guidance.

Create an account See pricing