CVE-2020-12108 (v3: 6.5)
6 May 2020
/options/mailman in GNU Mailman before 2.1.31 allows Arbitrary Content Injection.