{"id":"GHSA-f57v-q966-7fh6","aliases":[],"title":"Monolog Header injection in NativeMailerHandler","titleSource":"OSV","descriptionSource":"OSV","declaredSeverity":"LOW","description":"A header injection vulnerability has been identified in the NativeMailerHandler of the Monolog library. This vulnerability may allow an attacker to manipulate email headers when log messages are sent via email.","severity":"low","score":null,"published":"2024-05-15T23:08:13.000Z","modified":"2024-11-29T05:40:52.145Z","withdrawn":false,"knownExploited":false,"affected":[{"ecosystem":"Packagist","name":"monolog/monolog","sources":[{"name":"OSV · GHSA-f57v-q966-7fh6","url":"https://osv.dev/vulnerability/GHSA-f57v-q966-7fh6"}],"ranges":[{"events":[{"introduced":"1.8.0"},{"fixed":"1.12.0"}],"type":"ECOSYSTEM"}],"versions":["1.10.0","1.11.0","1.8.0","1.9.0","1.9.1"],"fixed":["1.12.0"]}],"sourceAffected":[],"references":["https://github.com/Seldaek/monolog/issues/458","https://github.com/Seldaek/monolog/pull/448#issuecomment-68208704","https://github.com/Seldaek/monolog/commit/515a096c864b00b3967f7f601680f85d4a2e4001","https://github.com/FriendsOfPHP/security-advisories/blob/master/monolog/monolog/2014-12-29-1.yaml","https://github.com/Seldaek/monolog"],"sources":[{"name":"OSV","id":"GHSA-f57v-q966-7fh6","modified":"2024-11-29T05:40:52.145864Z","url":"https://osv.dev/vulnerability/GHSA-f57v-q966-7fh6"}],"assessments":[],"products":[],"remediation":[],"kev":{"status":"unavailable","checkedAt":"2026-10-28T21:25:31.856Z"},"coverage":[{"source":"NVD","status":"not-checked"},{"source":"GHSA","status":"not-checked"},{"source":"EUVD","status":"not-checked"},{"source":"EPSS","status":"not-checked"}],"evidence":[]}