CVE-2026-0895
1 advisory.
Packagist/cpsit/typo3-mailqueue CVE-2026-0895: medium
mailqueue TYPO3 extension affected by Insecure Deserialization in QueueableFileTransport
Action: Upgrade cpsit/typo3-mailqueue to 0.4.3 or later.
composer require cpsit/typo3-mailqueue:0.4.3composer require cpsit/typo3-mailqueue:0.5.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.4.3 | - |
| 0.5.0 | 0.5.1 | - |
Fixed versions
| 0.4.3 | 0.5.1 |
Sources
- osv: GHSA-ggff-9mj3-7246
- https://github.com/CPS-IT/mailqueue/security/advisories/GHSA-ggff-9mj3-7246
- https://nvd.nist.gov/vuln/detail/CVE-2026-0895
- https://github.com/CPS-IT/mailqueue/commit/12a0a35027bb5609917790a94e43bbf117abf733
- https://github.com/CPS-IT/mailqueue/commit/fd09aa4e1a751551bae4b228bee814e22f2048db
- https://github.com/CPS-IT/mailqueue
- https://typo3.org/security/advisory/typo3-ext-sa-2026-001
CVE-2026-0895 · published · modified · JSON