{"action":"Upgrade cpsit/typo3-mailqueue to 0.4.5 or later.","affected":[{"fixed":"0.4.5","introduced":"0"},{"fixed":"0.5.2","introduced":"0.5.0"}],"component":"cpsit/typo3-mailqueue","cve_ids":["CVE-2026-1323"],"ecosystem":"Packagist","epss":0.00228,"exploited":false,"fixed_versions":["0.4.5","0.5.2"],"ghsa_id":"GHSA-2pm6-9fhx-vvg3","id":"tcs_01M5KES4PNSV6VKMAZKH54Z45Y","modified_at":"2026-05-05T15:56:07.479829Z","published_at":"2026-03-18T16:17:08Z","references":["https://osv.dev/vulnerability/GHSA-2pm6-9fhx-vvg3","https://github.com/CPS-IT/mailqueue/security/advisories/GHSA-2pm6-9fhx-vvg3","https://nvd.nist.gov/vuln/detail/CVE-2026-1323","https://github.com/CPS-IT/mailqueue/commit/0f7a1376bbbd8c7658030d02e51c10a85b1dfdf7","https://github.com/CPS-IT/mailqueue/commit/600c7dba99f8eea5f2505b848ee3dd4713440741","https://github.com/CPS-IT/mailqueue","https://typo3.org/security/advisory/typo3-ext-sa-2026-005"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-2pm6-9fhx-vvg3","url":"https://osv.dev/vulnerability/GHSA-2pm6-9fhx-vvg3"}],"summary":"The mailqueue TYPO3 extension has Insecure Deserialization in `TransportFailure` class"}