High DLA-1591-1 2 CVEs

libphp-phpmailer - security update

Published Nov 23, 2018 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 8	libphp-phpmailer	5.2.9+dfsg-2+deb8u4

Vulnerabilities 2

High 8.8

CVE-2018-19296

Phar object injection in PHPMailer

PHPMailer before 5.2.27 and 6.x before 6.0.6 is vulnerable to an object injection attack.

phpmailer/phpmailer libphp-phpmailer libphp-phpmailer Debian Ubuntu Packagist

Nov 16, 2018
Medium 5.5

CVE-2017-5223 Public exploit

Local file disclosure in PHPMailer

An issue was discovered in PHPMailer before 5.2.22. PHPMailer's msgHTML method applies transformations to an HTML document to make it usable as an email message body. One of the transformations is to convert relative image URLs into attachments using a script…

phpmailer/phpmailer libphp-phpmailer libphp-phpmailer Debian Ubuntu Packagist

Jan 16, 2017