Zimbra/zm-mailbox
develop@ 1c22ad3
Fixes27
CVEs0
Peak severityHigh
Commits29,473
Regression coverage9.1%
Highlights
Authorization Bypass: 10 prior fixes. Scrutinize any change in this area.
src/java/com/zimbra/cs/html/DefangFilter.java: most-fixed (3 issues). Treat as high-risk during review.
26 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
Cross-Site Scripting: 3 historical fix(es) link src/java/com/zimbra/cs/html/DefangFilter.java to Cross-Site Scripting.
Arbitrary File Access: 1 historical fix(es) link src/java/com/zimbra/common/soap/W3cDomUtil.java to Arbitrary File Access.
Authentication Bypass: 1 historical fix(es) link src/java/com/zimbra/cs/mailbox/ACL.java to Authentication Bypass.
Last analyzed 9 Oct 2026, 04:12 UTC