@tutao/tutanota-crypto (>=314.251028.1, <=314.251030.0) potentially affected by unknown CVE via @tutao/tutanota-utils (>=314.251028.1, <=314.251030.0)

@tutao/tutanota-utils NPM version =314.251028.1, =314.251028.1, =314.251030.0 Source cves: unknown CVE Source advisory: OSV:GHSA-24V3-254G-JV85...

@tutao/tutanota-crypto (>=314.251028.1, <=314.251030.0) potentially affected by unknown CVE via @tutao/tutanota-utils (>=314.251028.1, <=314.251030.0)

@tutao/tutanota-utils NPM version =314.251028.1, =314.251028.1, =314.251030.0 Source cves: unknown CVE Source advisory: SNYK:JS-TUTAOTUTANOTAUTILS-14545442...

@tutao/tutanota-crypto (>=314.251028.1, <=314.251030.0) potentially affected by unknown CVE via @tutao/tutanota-utils (>=314.251028.1, <=314.251030.0)

@tutao/tutanota-utils NPM version =314.251028.1, =314.251028.1, =314.251030.0 Source cves: unknown CVE Source advisory: GHSA-24V3-254G-JV85...

PT-2025-62935

Impact Users importing contacts from untrusted sources. Specifically crafted contact data can lead to some of DOM modifications for the link button next to the field e.g. the link address can be overriden. CSS can be manipulated to give the button arbitrary look and change it's size so that any...

EUVD-2023-50375

Malicious code in bioql PyPI...

CVE-2023-46116

Tutanota Tuta Mail is an encrypted email provider. Tutanota allows users to open links in emails in external applications. Prior to version 3.118.12, it correctly blocks the file: URL scheme, which can be used by malicious actors to gain code execution on a victims computer, however fails to chec...

Tutanota Input Validation Error Vulnerability

Tutanota is a very security- and privacy-conscious email service from Tuta that encrypts email, contacts, and calendar entries on all devices. An input validation error vulnerability exists in Tutanota versions 3.118.12 through 3.119.10, which stems from an attacker being able to send a manipulat...

Tutanota Code Issue Vulnerability

Tutanota is a very security- and privacy-conscious email service from Tuta that encrypts email, contacts, and calendar entries on all devices. A code issue vulnerability exists in Tutanota versions prior to 119.10. An attacker exploiting this vulnerability could attach images to html emails loade...

CVE-2023-46116

Tutanota Tuta Mail is an encrypted email provider. Tutanota allows users to open links in emails in external applications. Prior to version 3.118.12, it correctly blocks the file: URL scheme, which can be used by malicious actors to gain code execution on a victims computer, however fails to chec...

Code injection

Tutanota Tuta Mail is an encrypted email provider. Tutanota allows users to open links in emails in external applications. Prior to version 3.118.12, it correctly blocks the file: URL scheme, which can be used by malicious actors to gain code execution on a victims computer, however fails to chec...

CVE-2023-46116

Tutanota Tuta Mail is an encrypted email provider. Tutanota allows users to open links in emails in external applications. Prior to version 3.118.12, it correctly blocks the file: URL scheme, which can be used by malicious actors to gain code execution on a victims computer, however fails to chec...

CVE-2023-46116 Remote Code Execution via insufficiently sanitized call to shell.openExternal

Tutanota Tuta Mail is an encrypted email provider. Tutanota allows users to open links in emails in external applications. Prior to version 3.118.12, it correctly blocks the file: URL scheme, which can be used by malicious actors to gain code execution on a victims computer, however fails to chec...

CVE-2023-46116

The CVE affects Tutanota (Tuta Mail) when opening links in emails in external applications. Before update, it blocks file: but does not sufficiently validate other URL schemes (e.g., ftp:, smb:), which can lead to code execution on a victim’s machine if the user interacts with a malicious link. T...

CVE-2023-46116 Remote Code Execution via insufficiently sanitized call to shell.openExternal

Tutanota Tuta Mail is an encrypted email provider. Tutanota allows users to open links in emails in external applications. Prior to version 3.118.12, it correctly blocks the file: URL scheme, which can be used by malicious actors to gain code execution on a victims computer, however fails to chec...

CVE-2023-46116 Remote Code Execution via insufficiently sanitized call to shell.openExternal

Tutanota Tuta Mail is an encrypted email provider. Tutanota allows users to open links in emails in external applications. Prior to version 3.118.12, it correctly blocks the file: URL scheme, which can be used by malicious actors to gain code execution on a victims computer, however fails to chec...

Tutanota Input Validation Error Vulnerability

Tutanota is a very security- and privacy-conscious email service from Tuta that encrypts email, contacts, and calendar entries on all devices. An input validation error vulnerability exists in versions prior to Tutanota 3.118.12, which stems from allowing a user to open a link in an email in an...

PT-2023-29850

Name of the Vulnerable Software and Affected Versions Tutanota versions prior to 3.118.12 Description The issue concerns the handling of URL schemes in emails. Prior to version 3.118.12, Tutanota correctly blocks the file: URL scheme but fails to check other harmful schemes such as ftp: and smb:,...

CVE-2023-46116: Improper Input Validation

Tutanota Tuta Mail is an encrypted email provider. Tutanota allows users to open links in emails in external applications. Prior to version 3.118.12, it correctly blocks the file: URL scheme, which can be used by malicious actors to gain code execution on a victims computer, however fails to chec...

Microsoft bars Tutanota users from registering MS Teams accounts

By Waqas According to a Microsoft spokesperson, it will not be possible to change the current situation with Tutanota. Tutanota… This is a post from HackRead.com Read the original post: Microsoft bars Tutanota users from registering MS Teams accounts...

German court forcing Tutanota to let authorities read emails in plain text

By Sudais Asif As of 2017, Tutanota had over 2 million users across the globe. Find out why Germany wants to backdoor the encrypted email service provider. This is a post from HackRead.com Read the original post: German court forcing Tutanota to let authorities read emails in plain text...