pypi emailproxy vulnerabilities

Latest pypi emailproxy CVEs

Newest publication first

1. GHSA-9wgg-m99q-hhfc Expired tokens can be renewed without validating the account password

   Published 2023-12-19

   High·CVSS 8.1

   Impact In versions of the proxy from 2022-09-05 onwards (since 8c874c2ff3d503ac20c7d32f46e08547fcb9e23f), expired OAuth 2.0 client credentials grant (CCG) flow authorisation tokens could be renewed automatically without checking their validity against the original account configu...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.