Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Canarymail Component: Canary Mail Clear all filters
TI-2025-40325 CVE-2025-65318 · GHSA-w2r9-w6fr-cq88

When using the attachment interaction functionality, Canary Mail 5.1.40 and below saves…

Priority HIGH 80

When using the attachment interaction functionality, Canary Mail 5.1.40 and below saves documents to a file system without a Mark-of-the-Web tag, which allows attackers to bypass the built-in file protection mechanisms o…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.0056 Published 2025-12-16 No fix listed CWE-693