Roundcube Webmail before 1.5.12 and 1.6 before 1.6.12 is prone to a information disclosure vulnerability in the HTML style sanitizer.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-68460.json"