Skip to content
OpenAdvisories

Package · Packagist

cpsit/typo3-mailqueue

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 5.2
    CVE-2026-1323

    Insecure Deserialization in extension "Mailqueue" (mailqueue)

    The extension fails to properly define allowed classes used when deserializing transport failure metadata. An attacker may exploit this to execute untrusted serialized code. Note that an active exploit requires write access to the directory configured at $GLO…

    TYPO3 Extension "Mailqueue" cpsit/typo3-mailqueue Packagist
  • Medium 5.2
    CVE-2026-0895

    Insecure Deserialization in extension "Mailqueue" (mailqueue)

    The extension extends TYPO3’ FileSpool component, which was vulnerable to Insecure Deserialization prior to TYPO3-CORE-SA-2026-004 https://typo3.org/security/advisory/typo3-core-sa-2026-004 . Since the related fix is overwritten by the extension, using the ex…

    TYPO3 Extension "Mailqueue" cpsit/typo3-mailqueue Packagist