tocsin

CVE-2026-90936

1 advisory.

Packagist/froxlor/froxlor CVE-2026-90936: medium 4.3, EPSS 0.31%

Froxlor: Authenticated customers can read other customers' allowed sender aliases

Action: Upgrade froxlor/froxlor to 2.3.7 or later.

composer require froxlor/froxlor:2.3.7

Affected

introducedfixedlast affected
02.3.7-

Fixed versions

2.3.7

Sources

CVE-2026-90936 · published · modified · JSON