Approved changes feed: RSS · Atom

cpe:2.3:a:floriangaerber:magnesium-php:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorFloriangaerber (40c95c32-9587-5215-9d7b-30b653beb75c)
ProductMagnesium Php (9194c408-98d0-5eec-b61d-6f5daf7a2576)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/floriangaerber/magnesium-php purl2cpe 2026-06-01 10:16:14.984322

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-20187 vulnerable 2026-06-08 05:09:23.444260 Magnesium-PHP Base.php formatEmailString injection
LOW (3.5)
** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in Magnesium-PHP up to 0.3.0. It has been classified as problematic. Affected is the function formatEmailString of the file src/Magnesium/Message/Base.php. The manipulation of the argument email/name leads to injection. Upgrading to version 0.3.1 is able to address this issue. The patch is identified as 500d340e1f6421007413cc08a8383475221c2604. It is recommended to upgrade the affected component. VDB-244482 is the identifier assigned to this vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
Published: 2023-11-05T20:31:03.149Z
Updated: 2024-08-05T21:45:26.155Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.