Skip to content
OpenAdvisories

Package · Hex

swoosh

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Low 2.1
    CVE-2026-54893

    Email-derived URL path injection in the Swoosh Microsoft Graph adapter

    URL path injection in the Microsoft Graph adapter of Swoosh. Swoosh.Adapters.MsGraph builds its Microsoft Graph API request URL by interpolating the sender's email address into the URL path (/users/{from}/sendMail) without percent-encoding or validation. In a…

    swoosh swoosh swoosh Hex