Skip to main content
cve.nowby Sazabi
← Packagist
PackagistPackage

mediaessenz/mail

6 known vulnerabilities (1 high, 5 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
6 · 1 high, 5 medium
Registry
Packagist

Advisories 6

  • CVE-2026-120327Medium 5.3

    Open Redirection in extension "Mail" (mail)

    Affected: from 4.0.0, fixed in 4.2.0; fixed in 3.12.5.

  • CVE-2026-120328Medium 6.9

    Information Disclosure in extension "Mail" (mail)

    Affected: from 4.0.0, fixed in 4.2.0; fixed in 3.12.5.

  • CVE-2026-120329Medium 5.3

    Broken Access Control in extension "Mail" (mail)

    Affected: from 4.0.0, fixed in 4.2.0; fixed in 3.12.5.

  • Broken Access Control in extension "Mail" (mail)

    Affected: from 4.0.0, fixed in 4.2.0; fixed in 3.12.5.

  • CVE-2026-120331Medium 5.3

    Server-Side Request Forgery in extension "Mail" (mail)

    Affected: from 4.0.0, fixed in 4.2.0; fixed in 3.12.5.

  • CVE-2026-120332Medium 5.1

    Cross-Site Scripting in extension "Mail" (mail)

    Affected: from 4.0.0, fixed in 4.2.0; fixed in 3.12.5.