CVE-2025-53865: Roundup-Tracker Roundup

Medium severity, CVSS 6.4. EPSS: 0.2% chance of exploitation in the next 30 days.

In Roundup before 2.5.0, XSS can occur via interaction between URLs and issue tracker templates (devel and responsive).

Affected products

• Roundup-Tracker Roundup: before 2.5.0 (fixed in 2.5.0)

Published 2025-07-13. Last modified 2026-06-17.