Skip to content
OpenAdvisories

Package · Packagist

swiftmailer/swiftmailer

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • Critical —
    GHSA-4qpj-gxxg-jqg4

    Swiftmailer Sendmail transport arbitrary shell execution

    Prior to 5.2.1, the sendmail transport (`Swift_Transport_SendmailTransport`) was vulnerable to an arbitrary shell execution if the "From" header came from a non-trusted source and no "Return-Path" is configured. This has been fixed in 5.2.1. If you are using …

    swiftmailer/swiftmailer Packagist
  • Medium 5.0
    CVE-2024-28859

    Gadget chain in Symfony 1 due to vulnerable Swift Mailer dependency

    Symfony1 is a community fork of symfony 1.4 with DIC, form enhancements, latest Swiftmailer, better performance, composer compatible and PHP 8 support. Symfony 1 has a gadget chain due to vulnerable Swift Mailer dependency that would enable an attacker to get…

    FriendsOfSymfony1 symfony1 swiftmailer/swiftmailer friendsofsymfony1/symfony1 Packagist
  • Critical 9.8
    CVE-2016-10074 Public exploit EPSS 44%

    Swift Mailer mail transport Command Injection

    The mail transport (aka Swift_Transport_MailTransport) in Swift Mailer before 5.4.5 might allow remote attackers to pass extra parameters to the mail command and consequently execute arbitrary code via a \" (backslash double quote) in a crafted e-mail address…

    swiftmailer/swiftmailer libphp-swiftmailer libphp-swiftmailer Debian Ubuntu Packagist