Skip to content

Monolog Header injection in NativeMailerHandler

Low severity GitHub Reviewed Published May 15, 2024 to the GitHub Advisory Database

Package

composer monolog/monolog (Composer)

Affected versions

>= 1.8.0, < 1.12.0

Patched versions

1.12.0

Description

A header injection vulnerability has been identified in the NativeMailerHandler of the Monolog library. This vulnerability may allow an attacker to manipulate email headers when log messages are sent via email.

References

Published to the GitHub Advisory Database May 15, 2024
Reviewed May 15, 2024

Severity

Low

Weaknesses

CVE ID

No known CVE

GHSA ID

GHSA-f57v-q966-7fh6

Source code

Checking history
See something to contribute? Suggest improvements for this vulnerability.