pleroma/changelog.d/swoosh-1.28.0.security
Phantasm 760daad8ef
Sec: Bump swoosh to version 1.28.0
Fixes:
  swoosh 1.16.12 VULNERABLE!
    EEF-CVE-2026-54893 (LOW)
    aka: CVE-2026-54893, GHSA-754j-98wh-57rf
    Email-derived URL path injection in the Swoosh Microsoft Graph adapter
    https://osv.dev/vulnerability/EEF-CVE-2026-54893
2026-09-08 21:53:55 +02:00

1 line
106 B
Text

Update swoosh to version 1.28.0 which fixes a url injection vulnerability for the Microsoft Graph adapter