Skip to content
OpenAdvisories

Package · crates.io

zeptoclaw

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    GHSA-4cm8-xpfv-jv6f

    ZeptoClaw: Email Sender Spoofing to bypass Header-Only From Allowlist Validation

    ### Summary The email channel authorizes senders based on the parsed `From` header identity only. If upstream email authentication/enforcement is weak (for example, relaxed SPF/DKIM/DMARC handling), an attacker can spoof an allowlisted sender address and have…

    zeptoclaw crates.io