modoboa@2.2.1 vulnerabilities

Mail hosting made simple

Known vulnerabilities in the modoboa package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Vulnerability	Vulnerable Version
M Cross-site Scripting (XSS) modoboa is a Mail hosting made simple Affected versions of this package are vulnerable to Cross-site Scripting (XSS) when displaying the form error messages. How to fix Cross-site Scripting (XSS)? Upgrade `modoboa` to version 2.2.2 or higher.	[,2.2.2)
M Cross-Site Request Forgery (CSRF) modoboa is a Mail hosting made simple Affected versions of this package are vulnerable to Cross-Site Request Forgery (CSRF) due to the improper handling of user requests. An attacker can trick the victim into executing an unwanted logout by sending a malicious request. How to fix Cross-Site Request Forgery (CSRF)? Upgrade `modoboa` to version 2.2.2 or higher.	[,2.2.2)
M Cross-site Scripting (XSS) modoboa is a Mail hosting made simple Affected versions of this package are vulnerable to Cross-site Scripting (XSS) via the profile language field due to improper user input sanitization. How to fix Cross-site Scripting (XSS)? Upgrade `modoboa` to version 2.2.2 or higher.	[,2.2.2)
M Cross-site Scripting (XSS) modoboa is a Mail hosting made simple Affected versions of this package are vulnerable to Cross-site Scripting (XSS) when displaying form error messages due to improper user input sanitization. How to fix Cross-site Scripting (XSS)? Upgrade `modoboa` to version 2.2.2 or higher.	[,2.2.2)