CVE-2026-50880
CVE-2026-50880
This page contains facts from public vulnerability sources. Check the original advisory before updating.
An issue in the sendmail transport integration component of YouTransfer v1.0.6 allows attackers to execute arbitrary code via supplying a crafted request.
CVSS 9.8 · Critical · EPSS 0.5%
- Published
- Updated
Stack: node
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
youtransfer npm
- Affected ranges
- SEMVER: ≤ 1.0.6
No fix published