{"action":"Upgrade @agenticmail/api to 0.9.32 or later.","affected":[{"fixed":"0.9.32","introduced":"0"}],"component":"@agenticmail/api","cve_ids":["CVE-2026-47255"],"ecosystem":"npm","epss":0.00252,"exploited":false,"fixed_versions":["0.9.32"],"ghsa_id":"GHSA-wjjv-3mj2-39hf","id":"tcs_01M5KGF8JT4Z4FTF0HV4WA6EQ5","modified_at":"2026-09-10T03:50:47.817580241Z","published_at":"2026-05-29T19:23:29Z","references":["https://osv.dev/vulnerability/GHSA-wjjv-3mj2-39hf","https://github.com/agenticmail/agenticmail/security/advisories/GHSA-wjjv-3mj2-39hf","https://github.com/agenticmail/agenticmail/commit/1408de543fa3577d8c2d4fdb289c75fe6faafac7","https://github.com/agenticmail/agenticmail/commit/234b811e426a0743170f3b10bc43419d64330155","https://github.com/agenticmail/agenticmail/commit/6c70c8254c906f823392d7f5ccee88a5481e7731","https://github.com/agenticmail/agenticmail/commit/8cb053f2307dd77b7736ffa0d7df04b0ccc3272d","https://github.com/agenticmail/agenticmail","https://github.com/agenticmail/agenticmail/blob/7b9b05d973676e9f3d097c08b8e649f59bfc15d0/CHANGELOG.md?plain=1#L1842","https://github.com/agenticmail/agenticmail/blob/7b9b05d973676e9f3d097c08b8e649f59bfc15d0/packages/core/src/mail/sender.ts#L33"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-wjjv-3mj2-39hf","url":"https://osv.dev/vulnerability/GHSA-wjjv-3mj2-39hf"}],"summary":"AgenticMail API/storage and outbound relay hardening fixes"}