{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"2.0.0-beta1","last_affected":"2.1.0"}],"component":"maildev","cve_ids":["CVE-2024-27448"],"ecosystem":"npm","epss":0.00904,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-vc6q-ccj9-9r89","id":"tcs_01M5KGBG0AR4YQN2H2VVW3WWZJ","modified_at":"2025-03-14T19:53:02Z","published_at":"2024-04-05T06:30:46Z","references":["https://osv.dev/vulnerability/GHSA-vc6q-ccj9-9r89","https://nvd.nist.gov/vuln/detail/CVE-2024-27448","https://github.com/maildev/maildev/issues/467","https://gist.github.com/stypr/fe2003f00959f7e3d92ab9d5260433f8","https://github.com/Tim-Hoekstra/MailDev-2.1.0-Exploit-RCE","https://github.com/maildev/maildev","https://github.com/maildev/maildev/releases","https://intrix.com.au/articles/exposing-major-security-flaw-in-maildev"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-vc6q-ccj9-9r89","url":"https://osv.dev/vulnerability/GHSA-vc6q-ccj9-9r89"}],"summary":"MailDev Remote Code Execution"}