GitHub Advisoryadvisory · Packagist

GHSA-rq6q-hjvh-5mwh Flow Swift Mailer package Remote code execution

CRITICAL Published 2024-05-17 Modified 2024-05-17 Official page ↗

Ecosystem: Packagist
Packages: neos/swiftmailer
Severity: Critical
Reviewed: 2024-05-17

Affected packages

• Packagist neos/swiftmailer: < 5.4.5 → fixed in 5.4.5

Description

A remote code execution vulnerability has been found in the Swift Mailer library (swiftmailer/swiftmailer) recently. See this advisory for details. If you are not using the default mail() transport, this particular problem does not affect you. Upgrading is of course still recommended!

References

https://github.com/FriendsOfPHP/security-advisories/blob/master/neos/swiftmailer/2017-01-06.yaml web
https://github.com/neos/swiftmailer package
https://www.neos.io/blog/flow-sa-2017-01.html web