Django REST framework

Lookup for vulnerabilities affecting packages.

Vulnerability_id VCID-f585-qf89-f7f3

Summary

Object injection
PHPMailer is vulnerable to an object injection attack.

Aliases

alias	CVE-2018-19296

alias	GHSA-7w4p-72j7-v7c2

Fixed_packages

url pkg:composer/phpmailer/phpmailer@5.2.27

purl pkg:composer/phpmailer/phpmailer@5.2.27

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-16kp-5zpw-fbha

vulnerability	VCID-44d3-4txm-cyc3

vulnerability	VCID-jca1-hyks-kud3

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/phpmailer/phpmailer@5.2.27

url pkg:composer/phpmailer/phpmailer@6.0.6

purl pkg:composer/phpmailer/phpmailer@6.0.6

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-16kp-5zpw-fbha

vulnerability	VCID-44d3-4txm-cyc3

vulnerability	VCID-jca1-hyks-kud3

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/phpmailer/phpmailer@6.0.6

url pkg:deb/debian/libphp-phpmailer@5.2.14%2Bdfsg-2.3%2Bdeb9u1

purl pkg:deb/debian/libphp-phpmailer@5.2.14%2Bdfsg-2.3%2Bdeb9u1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-16kp-5zpw-fbha

vulnerability	VCID-4mjb-ur86-hkaz

vulnerability	VCID-f585-qf89-f7f3

vulnerability	VCID-zju7-7wax-zfhz

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libphp-phpmailer@5.2.14%252Bdfsg-2.3%252Bdeb9u1

url	pkg:deb/debian/libphp-phpmailer@5.2.14%2Bdfsg-2.4?distro=trixie
purl	pkg:deb/debian/libphp-phpmailer@5.2.14%2Bdfsg-2.4?distro=trixie
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/libphp-phpmailer@5.2.14%252Bdfsg-2.4%3Fdistro=trixie

url pkg:deb/debian/libphp-phpmailer@6.0.6-0.1

purl pkg:deb/debian/libphp-phpmailer@6.0.6-0.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-16kp-5zpw-fbha

vulnerability	VCID-4mjb-ur86-hkaz

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libphp-phpmailer@6.0.6-0.1

url pkg:deb/debian/libphp-phpmailer@6.2.0-2?distro=trixie

purl pkg:deb/debian/libphp-phpmailer@6.2.0-2?distro=trixie

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-jca1-hyks-kud3

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libphp-phpmailer@6.2.0-2%3Fdistro=trixie

url	pkg:deb/debian/libphp-phpmailer@6.6.3-1?distro=trixie
purl	pkg:deb/debian/libphp-phpmailer@6.6.3-1?distro=trixie
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/libphp-phpmailer@6.6.3-1%3Fdistro=trixie

url	pkg:deb/debian/libphp-phpmailer@6.9.3-1?distro=trixie
purl	pkg:deb/debian/libphp-phpmailer@6.9.3-1?distro=trixie
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:deb/debian/libphp-phpmailer@6.9.3-1%3Fdistro=trixie

Affected_packages

url pkg:composer/phpmailer/phpmailer@5.0.0

purl pkg:composer/phpmailer/phpmailer@5.0.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-7kvh-8w1t-2kej

vulnerability	VCID-cq4m-3q7u-cbg3

vulnerability	VCID-f585-qf89-f7f3

vulnerability	VCID-xrtk-1rmg-7uca

vulnerability	VCID-ywsv-ddhg-b7es

vulnerability	VCID-zju7-7wax-zfhz

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/phpmailer/phpmailer@5.0.0

url pkg:composer/phpmailer/phpmailer@5.2.2

purl pkg:composer/phpmailer/phpmailer@5.2.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-16kp-5zpw-fbha

vulnerability	VCID-44d3-4txm-cyc3

vulnerability	VCID-7kvh-8w1t-2kej

vulnerability	VCID-cq4m-3q7u-cbg3

vulnerability	VCID-f585-qf89-f7f3

vulnerability	VCID-jca1-hyks-kud3

vulnerability	VCID-n13m-y4ks-euep

vulnerability	VCID-xrtk-1rmg-7uca

vulnerability	VCID-ywsv-ddhg-b7es

vulnerability	VCID-zju7-7wax-zfhz

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/phpmailer/phpmailer@5.2.2

url pkg:composer/phpmailer/phpmailer@5.2.4

purl pkg:composer/phpmailer/phpmailer@5.2.4

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-16kp-5zpw-fbha

vulnerability	VCID-44d3-4txm-cyc3

vulnerability	VCID-7kvh-8w1t-2kej

vulnerability	VCID-cq4m-3q7u-cbg3

vulnerability	VCID-f585-qf89-f7f3

vulnerability	VCID-jca1-hyks-kud3

vulnerability	VCID-n13m-y4ks-euep

vulnerability	VCID-xrtk-1rmg-7uca

vulnerability	VCID-ywsv-ddhg-b7es

vulnerability	VCID-zju7-7wax-zfhz

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/phpmailer/phpmailer@5.2.4

url pkg:composer/phpmailer/phpmailer@5.2.5

purl pkg:composer/phpmailer/phpmailer@5.2.5

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-16kp-5zpw-fbha

vulnerability	VCID-44d3-4txm-cyc3

vulnerability	VCID-7kvh-8w1t-2kej

vulnerability	VCID-cq4m-3q7u-cbg3

vulnerability	VCID-f585-qf89-f7f3

vulnerability	VCID-jca1-hyks-kud3

vulnerability	VCID-n13m-y4ks-euep

vulnerability	VCID-xrtk-1rmg-7uca

vulnerability	VCID-ywsv-ddhg-b7es

vulnerability	VCID-zju7-7wax-zfhz

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/phpmailer/phpmailer@5.2.5

url pkg:composer/phpmailer/phpmailer@5.2.6

purl pkg:composer/phpmailer/phpmailer@5.2.6

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-16kp-5zpw-fbha

vulnerability	VCID-44d3-4txm-cyc3

vulnerability	VCID-7kvh-8w1t-2kej

vulnerability	VCID-cq4m-3q7u-cbg3

vulnerability	VCID-f585-qf89-f7f3

vulnerability	VCID-jca1-hyks-kud3

vulnerability	VCID-n13m-y4ks-euep

vulnerability	VCID-xrtk-1rmg-7uca

vulnerability	VCID-ywsv-ddhg-b7es

vulnerability	VCID-zju7-7wax-zfhz

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/phpmailer/phpmailer@5.2.6

url pkg:composer/phpmailer/phpmailer@5.2.7

purl pkg:composer/phpmailer/phpmailer@5.2.7

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-16kp-5zpw-fbha

vulnerability	VCID-44d3-4txm-cyc3

vulnerability	VCID-7kvh-8w1t-2kej

vulnerability	VCID-cq4m-3q7u-cbg3

vulnerability	VCID-f585-qf89-f7f3

vulnerability	VCID-jca1-hyks-kud3

vulnerability	VCID-n13m-y4ks-euep

vulnerability	VCID-xrtk-1rmg-7uca

vulnerability	VCID-ywsv-ddhg-b7es

vulnerability	VCID-zju7-7wax-zfhz

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/phpmailer/phpmailer@5.2.7

url pkg:composer/phpmailer/phpmailer@5.2.8

purl pkg:composer/phpmailer/phpmailer@5.2.8

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-16kp-5zpw-fbha

vulnerability	VCID-44d3-4txm-cyc3

vulnerability	VCID-7kvh-8w1t-2kej

vulnerability	VCID-cq4m-3q7u-cbg3

vulnerability	VCID-f585-qf89-f7f3

vulnerability	VCID-jca1-hyks-kud3

vulnerability	VCID-n13m-y4ks-euep

vulnerability	VCID-xrtk-1rmg-7uca

vulnerability	VCID-ywsv-ddhg-b7es

vulnerability	VCID-zju7-7wax-zfhz

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/phpmailer/phpmailer@5.2.8

url pkg:composer/phpmailer/phpmailer@5.2.9

purl pkg:composer/phpmailer/phpmailer@5.2.9

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-16kp-5zpw-fbha

vulnerability	VCID-44d3-4txm-cyc3

vulnerability	VCID-7kvh-8w1t-2kej

vulnerability	VCID-cq4m-3q7u-cbg3

vulnerability	VCID-f585-qf89-f7f3

vulnerability	VCID-jca1-hyks-kud3

vulnerability	VCID-n13m-y4ks-euep

vulnerability	VCID-xrtk-1rmg-7uca

vulnerability	VCID-ywsv-ddhg-b7es

vulnerability	VCID-zju7-7wax-zfhz

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/phpmailer/phpmailer@5.2.9

url pkg:composer/phpmailer/phpmailer@5.2.10

purl pkg:composer/phpmailer/phpmailer@5.2.10

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-16kp-5zpw-fbha

vulnerability	VCID-44d3-4txm-cyc3

vulnerability	VCID-7kvh-8w1t-2kej

vulnerability	VCID-cq4m-3q7u-cbg3

vulnerability	VCID-f585-qf89-f7f3

vulnerability	VCID-jca1-hyks-kud3

vulnerability	VCID-xrtk-1rmg-7uca

vulnerability	VCID-ywsv-ddhg-b7es

vulnerability	VCID-zju7-7wax-zfhz

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/phpmailer/phpmailer@5.2.10

url pkg:composer/phpmailer/phpmailer@5.2.11

purl pkg:composer/phpmailer/phpmailer@5.2.11

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-16kp-5zpw-fbha

vulnerability	VCID-44d3-4txm-cyc3

vulnerability	VCID-7kvh-8w1t-2kej

vulnerability	VCID-cq4m-3q7u-cbg3

vulnerability	VCID-f585-qf89-f7f3

vulnerability	VCID-jca1-hyks-kud3

vulnerability	VCID-xrtk-1rmg-7uca

vulnerability	VCID-ywsv-ddhg-b7es

vulnerability	VCID-zju7-7wax-zfhz

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/phpmailer/phpmailer@5.2.11

url pkg:composer/phpmailer/phpmailer@5.2.12

purl pkg:composer/phpmailer/phpmailer@5.2.12

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-16kp-5zpw-fbha

vulnerability	VCID-44d3-4txm-cyc3

vulnerability	VCID-7kvh-8w1t-2kej

vulnerability	VCID-cq4m-3q7u-cbg3

vulnerability	VCID-f585-qf89-f7f3

vulnerability	VCID-jca1-hyks-kud3

vulnerability	VCID-xrtk-1rmg-7uca

vulnerability	VCID-ywsv-ddhg-b7es

vulnerability	VCID-zju7-7wax-zfhz

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/phpmailer/phpmailer@5.2.12

url pkg:composer/phpmailer/phpmailer@5.2.13

purl pkg:composer/phpmailer/phpmailer@5.2.13

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-16kp-5zpw-fbha

vulnerability	VCID-44d3-4txm-cyc3

vulnerability	VCID-7kvh-8w1t-2kej

vulnerability	VCID-cq4m-3q7u-cbg3

vulnerability	VCID-f585-qf89-f7f3

vulnerability	VCID-jca1-hyks-kud3

vulnerability	VCID-xrtk-1rmg-7uca

vulnerability	VCID-ywsv-ddhg-b7es

vulnerability	VCID-zju7-7wax-zfhz

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/phpmailer/phpmailer@5.2.13

url pkg:composer/phpmailer/phpmailer@5.2.14

purl pkg:composer/phpmailer/phpmailer@5.2.14

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-16kp-5zpw-fbha

vulnerability	VCID-44d3-4txm-cyc3

vulnerability	VCID-cq4m-3q7u-cbg3

vulnerability	VCID-f585-qf89-f7f3

vulnerability	VCID-jca1-hyks-kud3

vulnerability	VCID-xrtk-1rmg-7uca

vulnerability	VCID-ywsv-ddhg-b7es

vulnerability	VCID-zju7-7wax-zfhz

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/phpmailer/phpmailer@5.2.14

url pkg:composer/phpmailer/phpmailer@5.2.15

purl pkg:composer/phpmailer/phpmailer@5.2.15

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-16kp-5zpw-fbha

vulnerability	VCID-44d3-4txm-cyc3

vulnerability	VCID-cq4m-3q7u-cbg3

vulnerability	VCID-f585-qf89-f7f3

vulnerability	VCID-jca1-hyks-kud3

vulnerability	VCID-xrtk-1rmg-7uca

vulnerability	VCID-ywsv-ddhg-b7es

vulnerability	VCID-zju7-7wax-zfhz

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/phpmailer/phpmailer@5.2.15

url pkg:composer/phpmailer/phpmailer@5.2.16

purl pkg:composer/phpmailer/phpmailer@5.2.16

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-16kp-5zpw-fbha

vulnerability	VCID-44d3-4txm-cyc3

vulnerability	VCID-cq4m-3q7u-cbg3

vulnerability	VCID-f585-qf89-f7f3

vulnerability	VCID-jca1-hyks-kud3

vulnerability	VCID-xrtk-1rmg-7uca

vulnerability	VCID-ywsv-ddhg-b7es

vulnerability	VCID-zju7-7wax-zfhz

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/phpmailer/phpmailer@5.2.16

url pkg:composer/phpmailer/phpmailer@5.2.17

purl pkg:composer/phpmailer/phpmailer@5.2.17

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-16kp-5zpw-fbha

vulnerability	VCID-44d3-4txm-cyc3

vulnerability	VCID-cq4m-3q7u-cbg3

vulnerability	VCID-f585-qf89-f7f3

vulnerability	VCID-jca1-hyks-kud3

vulnerability	VCID-xrtk-1rmg-7uca

vulnerability	VCID-ywsv-ddhg-b7es

vulnerability	VCID-zju7-7wax-zfhz

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/phpmailer/phpmailer@5.2.17

url pkg:composer/phpmailer/phpmailer@5.2.18

purl pkg:composer/phpmailer/phpmailer@5.2.18

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-16kp-5zpw-fbha

vulnerability	VCID-44d3-4txm-cyc3

vulnerability	VCID-f585-qf89-f7f3

vulnerability	VCID-jca1-hyks-kud3

vulnerability	VCID-xrtk-1rmg-7uca

vulnerability	VCID-ywsv-ddhg-b7es

vulnerability	VCID-zju7-7wax-zfhz

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/phpmailer/phpmailer@5.2.18

url pkg:composer/phpmailer/phpmailer@5.2.19

purl pkg:composer/phpmailer/phpmailer@5.2.19

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-16kp-5zpw-fbha

vulnerability	VCID-44d3-4txm-cyc3

vulnerability	VCID-f585-qf89-f7f3

vulnerability	VCID-jca1-hyks-kud3

vulnerability	VCID-xrtk-1rmg-7uca

vulnerability	VCID-ywsv-ddhg-b7es

vulnerability	VCID-zju7-7wax-zfhz

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/phpmailer/phpmailer@5.2.19

url pkg:composer/phpmailer/phpmailer@5.2.20

purl pkg:composer/phpmailer/phpmailer@5.2.20

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-16kp-5zpw-fbha

vulnerability	VCID-44d3-4txm-cyc3

vulnerability	VCID-f585-qf89-f7f3

vulnerability	VCID-jca1-hyks-kud3

vulnerability	VCID-ywsv-ddhg-b7es

vulnerability	VCID-zju7-7wax-zfhz

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/phpmailer/phpmailer@5.2.20

url pkg:composer/phpmailer/phpmailer@5.2.21

purl pkg:composer/phpmailer/phpmailer@5.2.21

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-16kp-5zpw-fbha

vulnerability	VCID-44d3-4txm-cyc3

vulnerability	VCID-f585-qf89-f7f3

vulnerability	VCID-jca1-hyks-kud3

vulnerability	VCID-ywsv-ddhg-b7es

vulnerability	VCID-zju7-7wax-zfhz

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/phpmailer/phpmailer@5.2.21

url pkg:composer/phpmailer/phpmailer@5.2.22

purl pkg:composer/phpmailer/phpmailer@5.2.22

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-16kp-5zpw-fbha

vulnerability	VCID-44d3-4txm-cyc3

vulnerability	VCID-f585-qf89-f7f3

vulnerability	VCID-jca1-hyks-kud3

vulnerability	VCID-zju7-7wax-zfhz

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/phpmailer/phpmailer@5.2.22

url pkg:composer/phpmailer/phpmailer@5.2.23

purl pkg:composer/phpmailer/phpmailer@5.2.23

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-16kp-5zpw-fbha

vulnerability	VCID-44d3-4txm-cyc3

vulnerability	VCID-f585-qf89-f7f3

vulnerability	VCID-jca1-hyks-kud3

vulnerability	VCID-zju7-7wax-zfhz

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/phpmailer/phpmailer@5.2.23

url pkg:composer/phpmailer/phpmailer@5.2.24

purl pkg:composer/phpmailer/phpmailer@5.2.24

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-16kp-5zpw-fbha

vulnerability	VCID-44d3-4txm-cyc3

vulnerability	VCID-f585-qf89-f7f3

vulnerability	VCID-jca1-hyks-kud3

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/phpmailer/phpmailer@5.2.24

url pkg:composer/phpmailer/phpmailer@5.2.25

purl pkg:composer/phpmailer/phpmailer@5.2.25

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-16kp-5zpw-fbha

vulnerability	VCID-44d3-4txm-cyc3

vulnerability	VCID-f585-qf89-f7f3

vulnerability	VCID-jca1-hyks-kud3

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/phpmailer/phpmailer@5.2.25

url pkg:composer/phpmailer/phpmailer@5.2.26

purl pkg:composer/phpmailer/phpmailer@5.2.26

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-16kp-5zpw-fbha

vulnerability	VCID-44d3-4txm-cyc3

vulnerability	VCID-f585-qf89-f7f3

vulnerability	VCID-jca1-hyks-kud3

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/phpmailer/phpmailer@5.2.26

url pkg:composer/phpmailer/phpmailer@6.0.0

purl pkg:composer/phpmailer/phpmailer@6.0.0

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-16kp-5zpw-fbha

vulnerability	VCID-44d3-4txm-cyc3

vulnerability	VCID-f585-qf89-f7f3

vulnerability	VCID-jca1-hyks-kud3

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/phpmailer/phpmailer@6.0.0

url pkg:composer/phpmailer/phpmailer@6.0.1

purl pkg:composer/phpmailer/phpmailer@6.0.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-16kp-5zpw-fbha

vulnerability	VCID-44d3-4txm-cyc3

vulnerability	VCID-f585-qf89-f7f3

vulnerability	VCID-jca1-hyks-kud3

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/phpmailer/phpmailer@6.0.1

url pkg:composer/phpmailer/phpmailer@6.0.2

purl pkg:composer/phpmailer/phpmailer@6.0.2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-16kp-5zpw-fbha

vulnerability	VCID-44d3-4txm-cyc3

vulnerability	VCID-f585-qf89-f7f3

vulnerability	VCID-jca1-hyks-kud3

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/phpmailer/phpmailer@6.0.2

url pkg:composer/phpmailer/phpmailer@6.0.3

purl pkg:composer/phpmailer/phpmailer@6.0.3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-16kp-5zpw-fbha

vulnerability	VCID-44d3-4txm-cyc3

vulnerability	VCID-f585-qf89-f7f3

vulnerability	VCID-jca1-hyks-kud3

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/phpmailer/phpmailer@6.0.3

url pkg:composer/phpmailer/phpmailer@6.0.4

purl pkg:composer/phpmailer/phpmailer@6.0.4

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-16kp-5zpw-fbha

vulnerability	VCID-44d3-4txm-cyc3

vulnerability	VCID-f585-qf89-f7f3

vulnerability	VCID-jca1-hyks-kud3

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/phpmailer/phpmailer@6.0.4

url pkg:composer/phpmailer/phpmailer@6.0.5

purl pkg:composer/phpmailer/phpmailer@6.0.5

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-16kp-5zpw-fbha

vulnerability	VCID-44d3-4txm-cyc3

vulnerability	VCID-f585-qf89-f7f3

vulnerability	VCID-jca1-hyks-kud3

resource_url http://public2.vulnerablecode.io/packages/pkg:composer/phpmailer/phpmailer@6.0.5

url pkg:deb/debian/libphp-phpmailer@1.73-2

purl pkg:deb/debian/libphp-phpmailer@1.73-2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-16kp-5zpw-fbha

vulnerability	VCID-4mjb-ur86-hkaz

vulnerability	VCID-7kvh-8w1t-2kej

vulnerability	VCID-8msv-t7dq-qkd2

vulnerability	VCID-cq4m-3q7u-cbg3

vulnerability	VCID-f585-qf89-f7f3

vulnerability	VCID-k96h-dr15-ufhv

vulnerability	VCID-ywsv-ddhg-b7es

vulnerability	VCID-zju7-7wax-zfhz

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libphp-phpmailer@1.73-2

url pkg:deb/debian/libphp-phpmailer@1.73-2etch1

purl pkg:deb/debian/libphp-phpmailer@1.73-2etch1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-16kp-5zpw-fbha

vulnerability	VCID-4mjb-ur86-hkaz

vulnerability	VCID-7kvh-8w1t-2kej

vulnerability	VCID-8msv-t7dq-qkd2

vulnerability	VCID-cq4m-3q7u-cbg3

vulnerability	VCID-f585-qf89-f7f3

vulnerability	VCID-k96h-dr15-ufhv

vulnerability	VCID-ywsv-ddhg-b7es

vulnerability	VCID-zju7-7wax-zfhz

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libphp-phpmailer@1.73-2etch1

url pkg:deb/debian/libphp-phpmailer@1.73-6

purl pkg:deb/debian/libphp-phpmailer@1.73-6

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-16kp-5zpw-fbha

vulnerability	VCID-4mjb-ur86-hkaz

vulnerability	VCID-7kvh-8w1t-2kej

vulnerability	VCID-8msv-t7dq-qkd2

vulnerability	VCID-cq4m-3q7u-cbg3

vulnerability	VCID-f585-qf89-f7f3

vulnerability	VCID-ywsv-ddhg-b7es

vulnerability	VCID-zju7-7wax-zfhz

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libphp-phpmailer@1.73-6

url pkg:deb/debian/libphp-phpmailer@5.1-1

purl pkg:deb/debian/libphp-phpmailer@5.1-1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-16kp-5zpw-fbha

vulnerability	VCID-4mjb-ur86-hkaz

vulnerability	VCID-7kvh-8w1t-2kej

vulnerability	VCID-8msv-t7dq-qkd2

vulnerability	VCID-cq4m-3q7u-cbg3

vulnerability	VCID-f585-qf89-f7f3

vulnerability	VCID-ywsv-ddhg-b7es

vulnerability	VCID-zju7-7wax-zfhz

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libphp-phpmailer@5.1-1

url pkg:deb/debian/libphp-phpmailer@5.1-1%2Bdeb6u11

purl pkg:deb/debian/libphp-phpmailer@5.1-1%2Bdeb6u11

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-16kp-5zpw-fbha

vulnerability	VCID-4mjb-ur86-hkaz

vulnerability	VCID-7kvh-8w1t-2kej

vulnerability	VCID-8msv-t7dq-qkd2

vulnerability	VCID-cq4m-3q7u-cbg3

vulnerability	VCID-f585-qf89-f7f3

vulnerability	VCID-ywsv-ddhg-b7es

vulnerability	VCID-zju7-7wax-zfhz

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libphp-phpmailer@5.1-1%252Bdeb6u11

url pkg:deb/debian/libphp-phpmailer@5.1-1.1

purl pkg:deb/debian/libphp-phpmailer@5.1-1.1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-16kp-5zpw-fbha

vulnerability	VCID-4mjb-ur86-hkaz

vulnerability	VCID-7kvh-8w1t-2kej

vulnerability	VCID-8msv-t7dq-qkd2

vulnerability	VCID-cq4m-3q7u-cbg3

vulnerability	VCID-f585-qf89-f7f3

vulnerability	VCID-ywsv-ddhg-b7es

vulnerability	VCID-zju7-7wax-zfhz

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libphp-phpmailer@5.1-1.1

url pkg:deb/debian/libphp-phpmailer@5.2.9%2Bdfsg-2

purl pkg:deb/debian/libphp-phpmailer@5.2.9%2Bdfsg-2

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-16kp-5zpw-fbha

vulnerability	VCID-4mjb-ur86-hkaz

vulnerability	VCID-7kvh-8w1t-2kej

vulnerability	VCID-8msv-t7dq-qkd2

vulnerability	VCID-cq4m-3q7u-cbg3

vulnerability	VCID-f585-qf89-f7f3

vulnerability	VCID-ywsv-ddhg-b7es

vulnerability	VCID-zju7-7wax-zfhz

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libphp-phpmailer@5.2.9%252Bdfsg-2

url pkg:deb/debian/libphp-phpmailer@5.2.9%2Bdfsg-2%2Bdeb8u3

purl pkg:deb/debian/libphp-phpmailer@5.2.9%2Bdfsg-2%2Bdeb8u3

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-16kp-5zpw-fbha

vulnerability	VCID-4mjb-ur86-hkaz

vulnerability	VCID-7kvh-8w1t-2kej

vulnerability	VCID-cq4m-3q7u-cbg3

vulnerability	VCID-f585-qf89-f7f3

vulnerability	VCID-ywsv-ddhg-b7es

vulnerability	VCID-zju7-7wax-zfhz

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libphp-phpmailer@5.2.9%252Bdfsg-2%252Bdeb8u3

url pkg:deb/debian/libphp-phpmailer@5.2.14%2Bdfsg-2.3%2Bdeb9u1

purl pkg:deb/debian/libphp-phpmailer@5.2.14%2Bdfsg-2.3%2Bdeb9u1

is_vulnerable true

affected_by_vulnerabilities

vulnerability	VCID-16kp-5zpw-fbha

vulnerability	VCID-4mjb-ur86-hkaz

vulnerability	VCID-f585-qf89-f7f3

vulnerability	VCID-zju7-7wax-zfhz

resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/libphp-phpmailer@5.2.14%252Bdfsg-2.3%252Bdeb9u1

References

reference_url

https://api.first.org/data/v1/epss?cve=CVE-2018-19296

reference_id

reference_type

scores

value	0.01553
scoring_system	epss
scoring_elements	0.81467
published_at	2026-04-18T12:55:00Z

value	0.01553
scoring_system	epss
scoring_elements	0.81466
published_at	2026-04-16T12:55:00Z

value	0.01553
scoring_system	epss
scoring_elements	0.81429
published_at	2026-04-13T12:55:00Z

value	0.01553
scoring_system	epss
scoring_elements	0.81436
published_at	2026-04-12T12:55:00Z

value	0.02119
scoring_system	epss
scoring_elements	0.84099
published_at	2026-04-07T12:55:00Z

value	0.02119
scoring_system	epss
scoring_elements	0.84122
published_at	2026-04-08T12:55:00Z

value	0.02119
scoring_system	epss
scoring_elements	0.84128
published_at	2026-04-09T12:55:00Z

value	0.02119
scoring_system	epss
scoring_elements	0.8408
published_at	2026-04-02T12:55:00Z

value	0.02119
scoring_system	epss
scoring_elements	0.84067
published_at	2026-04-01T12:55:00Z

value	0.02119
scoring_system	epss
scoring_elements	0.84146
published_at	2026-04-11T12:55:00Z

value	0.02119
scoring_system	epss
scoring_elements	0.84097
published_at	2026-04-04T12:55:00Z

url

https://api.first.org/data/v1/epss?cve=CVE-2018-19296

reference_url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19296
reference_id
reference_type
scores
url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19296

reference_url

https://github.com/FriendsOfPHP/security-advisories/blob/master/phpmailer/phpmailer/CVE-2018-19296.yaml

reference_id

reference_type

scores

value	8.8
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

value	HIGH
scoring_system	generic_textual
scoring_elements

url

https://github.com/FriendsOfPHP/security-advisories/blob/master/phpmailer/phpmailer/CVE-2018-19296.yaml

reference_url

https://github.com/PHPMailer/PHPMailer/releases/tag/v5.2.27

reference_id

reference_type

scores

value	8.8
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

value	HIGH
scoring_system	generic_textual
scoring_elements

url

https://github.com/PHPMailer/PHPMailer/releases/tag/v5.2.27

reference_url

https://github.com/PHPMailer/PHPMailer/releases/tag/v6.0.6

reference_id

reference_type

scores

value	8.8
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

value	HIGH
scoring_system	generic_textual
scoring_elements

url

https://github.com/PHPMailer/PHPMailer/releases/tag/v6.0.6

reference_url

https://github.com/PHPMailer/PHPMailer/security/advisories/GHSA-7w4p-72j7-v7c2

reference_id

reference_type

scores

value	8.8
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

value	HIGH
scoring_system	cvssv3.1_qr
scoring_elements

value	HIGH
scoring_system	generic_textual
scoring_elements

url

https://github.com/PHPMailer/PHPMailer/security/advisories/GHSA-7w4p-72j7-v7c2

reference_url

https://lists.debian.org/debian-lts-announce/2018/12/msg00020.html

reference_id

reference_type

scores

value	8.8
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

value	HIGH
scoring_system	generic_textual
scoring_elements

url

https://lists.debian.org/debian-lts-announce/2018/12/msg00020.html

reference_url

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3B5WDPGUFNPG4NAZ6G4BZX43BKLAVA5B

reference_id

reference_type

scores

value	8.8
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

value	HIGH
scoring_system	generic_textual
scoring_elements

url

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3B5WDPGUFNPG4NAZ6G4BZX43BKLAVA5B

reference_url	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3B5WDPGUFNPG4NAZ6G4BZX43BKLAVA5B/
reference_id
reference_type
scores
url	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3B5WDPGUFNPG4NAZ6G4BZX43BKLAVA5B/

reference_url

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KPU66INRFY5BQ3ESVPRUXJR4DXQAFJVT

reference_id

reference_type

scores

value	8.8
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

value	HIGH
scoring_system	generic_textual
scoring_elements

url

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KPU66INRFY5BQ3ESVPRUXJR4DXQAFJVT

reference_url	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KPU66INRFY5BQ3ESVPRUXJR4DXQAFJVT/
reference_id
reference_type
scores
url	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KPU66INRFY5BQ3ESVPRUXJR4DXQAFJVT/

reference_url

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3B5WDPGUFNPG4NAZ6G4BZX43BKLAVA5B

reference_id

reference_type

scores

value	8.8
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

value	HIGH
scoring_system	generic_textual
scoring_elements

url

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3B5WDPGUFNPG4NAZ6G4BZX43BKLAVA5B

reference_url	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3B5WDPGUFNPG4NAZ6G4BZX43BKLAVA5B/
reference_id
reference_type
scores
url	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3B5WDPGUFNPG4NAZ6G4BZX43BKLAVA5B/

reference_url

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KPU66INRFY5BQ3ESVPRUXJR4DXQAFJVT

reference_id

reference_type

scores

value	8.8
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

value	HIGH
scoring_system	generic_textual
scoring_elements

url

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KPU66INRFY5BQ3ESVPRUXJR4DXQAFJVT

reference_url	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KPU66INRFY5BQ3ESVPRUXJR4DXQAFJVT/
reference_id
reference_type
scores
url	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KPU66INRFY5BQ3ESVPRUXJR4DXQAFJVT/

reference_url

https://www.debian.org/security/2018/dsa-4351

reference_id

reference_type

scores

value	8.8
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

value	HIGH
scoring_system	generic_textual
scoring_elements

url

https://www.debian.org/security/2018/dsa-4351

reference_url	https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=913912
reference_id	913912
reference_type
scores
url	https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=913912

reference_url

https://nvd.nist.gov/vuln/detail/CVE-2018-19296

reference_id

CVE-2018-19296

reference_type

scores

value	8.8
scoring_system	cvssv3.1
scoring_elements	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

value	HIGH
scoring_system	generic_textual
scoring_elements

url

https://nvd.nist.gov/vuln/detail/CVE-2018-19296

reference_url

https://github.com/advisories/GHSA-7w4p-72j7-v7c2

reference_id

GHSA-7w4p-72j7-v7c2

reference_type

scores

value	HIGH
scoring_system	cvssv3.1_qr
scoring_elements

url

https://github.com/advisories/GHSA-7w4p-72j7-v7c2

reference_url	https://usn.ubuntu.com/5956-1/
reference_id	USN-5956-1
reference_type
scores
url	https://usn.ubuntu.com/5956-1/

Weaknesses

cwe_id	1035
name	OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description	Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.

cwe_id	502
name	Deserialization of Untrusted Data
description	The product deserializes untrusted data without sufficiently verifying that the resulting data will be valid.

cwe_id	915
name	Improperly Controlled Modification of Dynamically-Determined Object Attributes
description	The product receives input from an upstream component that specifies multiple attributes, properties, or fields that are to be initialized or updated in an object, but it does not properly control which attributes can be modified.

cwe_id	937
name	OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description	Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.

cwe_id	1321
name	Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
description	The product receives input from an upstream component that specifies attributes that are to be initialized or updated in an object, but it does not properly control modifications of attributes of the object prototype.

Exploits

Severity_range_score 7.0 - 8.9

Exploitability 0.5

Weighted_severity 8.0

Risk_score 4.0

Resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-f585-qf89-f7f3

Vulnerability Instance