Alpine/emacs: high 7.8
emacsclient-mail.desktop in Emacs 28.1 through 28.2 is vulnerable to Emacs Lisp code injections through a crafted mailto: URI with unescaped double-quote characters. It is fixed in 29.0.90.
Action: Upgrade emacs to 28.2-r6 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 28.1 | 28.2-r6 | - |
Fixed versions
| 28.2-r6 |
Sources
published · modified · JSON