Composer mediaessenz/mail has 6 known advisories in the phpwarden feed. Feed 2026.11.08.1, updated 2026-11-07.
| CVE | Title | Severity | CVSS | Affected | Fixed in |
|---|---|---|---|---|---|
| CVE-2026-120328 | TYPO3-EXT-SA-2026-037: Information Disclosure in extension "Mail" (mail) | unknown | 0.0 | >=4.0.0 and <4.2.0 or <3.12.5 | 4.2.0, 3.12.5 |
| CVE-2026-120330 | TYPO3-EXT-SA-2026-037: Broken Access Control in extension "Mail" (mail) | unknown | 0.0 | >=4.0.0 and <4.2.0 or <3.12.5 | 4.2.0, 3.12.5 |
| CVE-2026-120327 | TYPO3-EXT-SA-2026-037: Open Redirection in extension "Mail" (mail) | unknown | 0.0 | >=4.0.0 and <4.2.0 or <3.12.5 | 4.2.0, 3.12.5 |
| CVE-2026-120329 | TYPO3-EXT-SA-2026-037: Broken Access Control in extension "Mail" (mail) | unknown | 0.0 | >=4.0.0 and <4.2.0 or <3.12.5 | 4.2.0, 3.12.5 |
| CVE-2026-120332 | TYPO3-EXT-SA-2026-037: Cross-Site Scripting in extension "Mail" (mail) | unknown | 0.0 | >=4.0.0 and <4.2.0 or <3.12.5 | 4.2.0, 3.12.5 |
| CVE-2026-120331 | TYPO3-EXT-SA-2026-037: Server-Side Request Forgery in extension "Mail" (mail) | unknown | 0.0 | >=4.0.0 and <4.2.0 or <3.12.5 | 4.2.0, 3.12.5 |
Find out in one command. phpwarden checks your composer.lock against this advisory and 20,000+ others, ranked by real-world exploitation (CISA KEV + EPSS). Free, offline, open data.
# PHP projects (recommended) composer require --dev phpwarden/phpwarden # then vendor/bin/phpwarden deps composer.lock # or, without Composer pipx install phpwarden && phpwarden deps composer.lock
Or keep it checked automatically: GitHub Action · pre-commit hook · GitLab CI · Laravel artisan command
Install docs How findings are ranked