[LOW] Roundcube Webmail: Unsafe deserialization in the redis/memcache session handler

PKSA-wjqw-j5qy-sdfr CVE-2026-35537 GHSA-rxj3-rrwm-pj4r

Affected package: roundcube/roundcubemail

Affected version: >=1.7-beta,<1.7-rc5

Reported by:
GitHub