@3ngram/server (0.7.0), @compeso/node-red-contrib-imap-email (1.0.0) +8 more potentially affected by unknown CVE via nodemailer (9.0.0)

nodemailer NPM version 9.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on nodemailer and may be impacted: - @3ngram/server 0.7.0 - @compeso/node-red-contrib-imap-email 1.0.0 - @hybridaione/hybridclaw =0.25.3, =2.71.0, =2.72.0 - imapflow 1.4.1 -...

CVE-2024-6201

HaloITSM is affected by a Template Injection vulnerability in the email-generation engine. Affected: HaloITSM versions up to 2.146.1. Impact: leakage of potentially sensitive information. Remediation: apply patches starting from 2.143.61 or upgrade to a version past 2.146.1, as referenced by the ...

PT-2024-37446 · Haloitsm · Haloitsm

Name of the Vulnerable Software and Affected Versions: HaloITSM versions up to 2.146.1 Description: The issue is related to a Template Injection vulnerability within the engine used to generate emails, which can lead to the leakage of potentially sensitive information. Recommendations: For versio...

CVE-2024-6201: Undefined Security Weakness

HaloITSM versions up to 2.146.1 are affected by a Template Injection vulnerability within the engine used to generate emails. This can lead to the leakage of potentially sensitive information. HaloITSM versions past 2.146.1 and patches starting from 2.143.61 fix the mentioned vulnerability...