Skip to content
OpenAdvisories

Package · npm

@agenticmail/core

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 8.2
    CVE-2026-57495

    AgenticMail: Unauthenticated inbound mail triggers bypassPermissions resume of the operator's Claude Code session (bridge-wake)

    AgenticMail gives AI agents real email addresses and phone numbers. In @agenticmail/claudecode prior to version 0.2.39, @agenticmail/codex prior to version 0.1.33, @agenticmail/core prior to version 0.9.43, and @agenticmail/openclaw prior to version 0.5.71, t…

    agenticmail @agenticmail/core @agenticmail/codex @agenticmail/claudecode npm
  • High 8.2
    CVE-2026-47255

    AgenticMail API/storage and outbound relay hardening

    AgenticMail gives AI agents real email addresses and phone numbers. @agenticmail/api prior to version 0.9.32 and @agenticmail/core prior to version 0.9.10 had weakness related to validation and and binding of inactive-agent hour filtering; storage SQL identif…

    agenticmail @agenticmail/core @agenticmail/api @agenticmail/core npm