Defined in 2 files
Last patched
wash_attribs in roundcube/roundcubemail was changed by 6 published CVE fixes between 2012 and 2026, in 9 distinct patches that added or removed 26 lines in total.
The name occurs in 2 files: program/lib/Roundcube/rcube_washtml.php, program/lib/washtml.php.
roundcube/roundcubemail has 59 CVEs with a located fix in total, so 10% of them touched this function.
Every published CVE whose fix changed wash_attribs, newest first, with the lines each fix touched.
CVE-2026-75003 · program/lib/Roundcube/rcube_washtml.php · line 321 · +1 −1
CVE-2026-48848 · program/lib/Roundcube/rcube_washtml.php · lines 296–306 · +10 −4
CVE-2025-68461 · program/lib/Roundcube/rcube_washtml.php · lines 306–307 · +2 −1
CVE-2021-46144 · program/lib/Roundcube/rcube_washtml.php · line 341 · +1 −1
CVE-2012-6121 · program/lib/washtml.php · line 217 · +1 −1
CVE-2012-3508 · program/lib/washtml.php · lines 243–244 · +2 −1
Get an alert when the next CVE fix lands in roundcube/roundcubemail, with the patched functions.
Monitor roundcubemail CVEsFunctions in the same files that CVE fixes also changed.
Functions in roundcube/roundcubemail changed by the most CVE fixes.
Common questions about CVE fixes to wash_attribs.
Fix locations are computed by RadicalNotion.AI from the upstream patch diff of each CVE. CVE data is sourced from the CVE Program.
Get an alert when a new CVE lands in this repository, with the patched functions and AI-written remediation guidance.
