We just published a security update to the stable version 1.0. Beside a recently reported Cross-Site-Scriping vulnerability, this release also contains some bug fixes and improvements we found important for the long term support branch of Roundcube.
It's considered stable and we recommend to update all productive installations of Roundcube with this version. Download it from roundcube.net/download (http://roundcube.net/download), see the full changelog (http://trac.roundcube.net/wiki/Changelog#RELEASE1.0.5) here.
Please do backup before updating!
Source: http://roundcube.net/news/2015/01/24/security-update-1.0.5/
Get it Now: http://roundcube.net/download