Unrestricted file upload vulnerability in the powermail extension before 1.6.11 and 2.x before 2.0.14 for TYPO3 allows remote attackers to execute arbitrary…
Full advisory text at GitHub advisory or NVD.
packagist package report
Is in2code/powermail safe?
in2code/powermail (packagist) has 9 known vulnerabilities, the worst rated HIGH. Upgrade to 13.0.1 or later to clear all of them. No malicious-package signal is recorded.
// reach
0 direct dependencies
none carry a known advisory
0 packages depend on it
dependents not yet indexed for this ecosystem
Create a free accountfor every dependency path, dependent and what to upgrade
// ai model usage
Tracked for PyPI packages. HuggingFace models declare Python dependencies, so packagist packages are not covered.
cvss
7.5
high
severity band, no base score published
epss
2.3%
medium
chance of exploitation in 30 days, 84th percentile of all CVEs
xyz score
3.4
low
CyberXYZ composite out of 10
fig. 01 — GHSA-m278-c6gg-4jrr, the advisory selected below
// 9 advisories
Is in2code/powermail safe to install?
CyberXYZ does not call a package safe in absolute terms. It records 9 known vulnerabilities for in2code/powermail (packagist), the worst rated HIGH, and no malicious-package signal. Whether it is acceptable depends on the version you run.
Does in2code/powermail have known vulnerabilities?
Yes. CyberXYZ records 9 known vulnerabilities for in2code/powermail (packagist), the worst rated HIGH. These include GHSA-m278-c6gg-4jrr, GHSA-rp53-fw29-rxg3, GHSA-mgw4-gv3f-g57j, GHSA-x769-3cwv-f8hc, GHSA-q25c-r482-77p9.
Which version of in2code/powermail should I use?
13.0.1 or later clears every advisory recorded for in2code/powermail (packagist). Check the release you pick before installing it.
How do I check in2code/powermail before installing?
Search in2code/powermail in CyberXYZ Check at https://cyberxyz.io/check?q=in2code%2Fpowermail. The xyz Scanner checks a project's dependencies, and CyberXYZ Proxy checks each package as it is installed.
Checked 2026-11-14 at 07:13 UTC. The most recent advisory here was published 2025-07-22. Updated continuously from NVD, GHSA, OSV and CNA feeds.