It was discovered that mailman version prior to 2.1.27 contained a vulnerability where malicious list owners could inject evil scripts into listinfo pages (CVE-2018-0618).
{ "section": "core" }
"https://advisories.mageia.org/MGASA-2018-0313.json"