Threats affecting pkg:github/mailcow: dockerized

mailcow: dockerized versions prior to 2026-11 contain a server-side template injection vulnerability. This flaw allows domain administrators to execute arbitrary commands within the shared rspamd container by injecting malicious domain-wide footers. Exploitation involves embedding a Jinja macro with an os.execute default value, which is rendered by the rspamd MOO_FOOTER prefilter. Successful attacks can lead to unauthorized reading or injection of mail across tenants and disabling of mail filtering.