Skip to content
OpenAdvisories

Package · Packagist

directorytree/imapengine

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.6
    CVE-2026-2469

    ImapEngine affected by command injection via the ID command parameters

    Versions of the package directorytree/imapengine before 1.22.3 are vulnerable to Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') via the id() function in ImapConnection.php due to improperly escaping user inp…

    directorytree/imapengine Packagist