{"id":"GHSA-xjw3-5r5c-m5ph","aliases":[],"title":"typo3 Security fix for Flow Swift Mailer package","titleSource":"OSV","descriptionSource":"OSV","declaredSeverity":"HIGH","description":"A remote code execution vulnerability has been found in the Swift Mailer library (swiftmailer/swiftmailer) recently. See this advisory for details. If you are not using the default mail() transport, this particular problem  does not affect you. Upgrading is of course still recommended!","severity":"high","score":null,"published":"2024-06-05T20:47:53.000Z","modified":"2024-12-02T05:46:56.409Z","withdrawn":false,"knownExploited":false,"affected":[{"ecosystem":"Packagist","name":"typo3/swiftmailer","sources":[{"name":"OSV · GHSA-xjw3-5r5c-m5ph","url":"https://osv.dev/vulnerability/GHSA-xjw3-5r5c-m5ph"}],"ranges":[{"events":[{"introduced":"4.1.0"},{"fixed":"4.1.99"}],"type":"ECOSYSTEM"}],"versions":["4.1.5"],"fixed":["4.1.99"]},{"ecosystem":"Packagist","name":"typo3/swiftmailer","sources":[{"name":"OSV · GHSA-xjw3-5r5c-m5ph","url":"https://osv.dev/vulnerability/GHSA-xjw3-5r5c-m5ph"}],"ranges":[{"events":[{"introduced":"5.4.0"},{"fixed":"5.4.5"}],"type":"ECOSYSTEM"}],"versions":["5.4.1","5.4.2"],"fixed":["5.4.5"]}],"sourceAffected":[],"references":["https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/swiftmailer/2017-01-06.yaml","https://github.com/neos/swiftmailer","https://www.neos.io/blog/flow-sa-2017-01.html"],"sources":[{"name":"OSV","id":"GHSA-xjw3-5r5c-m5ph","modified":"2024-12-02T05:46:56.409211Z","url":"https://osv.dev/vulnerability/GHSA-xjw3-5r5c-m5ph"}],"assessments":[],"products":[],"remediation":[],"kev":{"status":"unavailable","checkedAt":"2026-10-29T02:30:33.887Z"},"coverage":[{"source":"NVD","status":"not-checked"},{"source":"GHSA","status":"not-checked"},{"source":"EUVD","status":"not-checked"},{"source":"EPSS","status":"not-checked"}],"evidence":[]}