{"id":"GHSA-rq6q-hjvh-5mwh","aliases":[],"title":"Flow Swift Mailer package Remote code execution","description":"A remote code execution vulnerability has been found in the Swift Mailer library (swiftmailer/swiftmailer) recently. [See this advisory for details](http://legalhackers.com/advisories/SwiftMailer-Exploit-Remote-Code-Exec-CVE-2016-10074-Vuln.html). If you are not using the default mail() transport, this particular problem  does not affect you. Upgrading is of course still recommended!","severity":"critical","score":null,"published":"2024-05-17T23:06:50.000Z","modified":"2024-12-02T05:28:57.574Z","withdrawn":false,"knownExploited":false,"affected":[{"ecosystem":"Packagist","name":"neos/swiftmailer","ranges":[{"events":[{"introduced":"0"},{"fixed":"5.4.5"}],"type":"ECOSYSTEM"}],"versions":["4.1.5","5.0.3","5.2.2","5.3.1","5.4.1","5.4.2"],"fixed":["5.4.5"]}],"references":["https://github.com/FriendsOfPHP/security-advisories/blob/master/neos/swiftmailer/2017-01-06.yaml","https://github.com/neos/swiftmailer","https://www.neos.io/blog/flow-sa-2017-01.html"],"sources":[{"name":"OSV","id":"GHSA-rq6q-hjvh-5mwh","modified":"2024-12-02T05:28:57.574716Z","url":"https://osv.dev/vulnerability/GHSA-rq6q-hjvh-5mwh"}],"assessments":[]}