@agenticmail/core 0.7.0

Direct Vulnerabilities

Known vulnerabilities in the @agenticmail/core package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
H Missing Authentication for Critical Function @agenticmail/core is a Core SDK for AgenticMail — email, SMS, and phone call-control for AI agents Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the `handleBridgeMail` process. An attacker can execute arbitrary operating system commands, read or write files, and exfiltrate data under the operator's OAuth identity by sending a crafted external email to the bridge inbox, which is processed without verifying the sender's authenticity and embeds attacker-controlled fields directly into a privileged agent session. This is only exploitable if a headless-bridge deployment is configured with a fresh host-session (<24h) and external mail is routed to the bridge inbox. How to fix Missing Authentication for Critical Function? Upgrade `@agenticmail/core` to version 0.9.43 or higher.	<0.9.43
M SQL Injection @agenticmail/core is a Core SDK for AgenticMail — email, SMS, and phone call-control for AI agents Affected versions of this package are vulnerable to SQL Injection through insufficient validation in the `sender` process, SQL identifier handling, and outbound worker secret management. An attacker can gain unauthorized access, execute arbitrary SQL commands, or bypass security controls by submitting specially crafted input or manipulating storage and relay operations. How to fix SQL Injection? Upgrade `@agenticmail/core` to version 0.9.10 or higher.	<0.9.10

Vulnerability

Vulnerable Version

Missing Authentication for Critical Function

@agenticmail/core is a Core SDK for AgenticMail — email, SMS, and phone call-control for AI agents

Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the handleBridgeMail process. An attacker can execute arbitrary operating system commands, read or write files, and exfiltrate data under the operator's OAuth identity by sending a crafted external email to the bridge inbox, which is processed without verifying the sender's authenticity and embeds attacker-controlled fields directly into a privileged agent session. This is only exploitable if a headless-bridge deployment is configured with a fresh host-session (<24h) and external mail is routed to the bridge inbox.

How to fix Missing Authentication for Critical Function?

Upgrade @agenticmail/core to version 0.9.43 or higher.

<0.9.43

SQL Injection

@agenticmail/core is a Core SDK for AgenticMail — email, SMS, and phone call-control for AI agents

Affected versions of this package are vulnerable to SQL Injection through insufficient validation in the sender process, SQL identifier handling, and outbound worker secret management. An attacker can gain unauthorized access, execute arbitrary SQL commands, or bypass security controls by submitting specially crafted input or manipulating storage and relay operations.

How to fix SQL Injection?

Upgrade @agenticmail/core to version 0.9.10 or higher.

<0.9.10

@agenticmail/core@0.7.0

Core SDK for AgenticMail — email, SMS, and phone call-control for AI agents

latest version

latest non vulnerable version

first published

latest version published

licenses detected

Direct Vulnerabilities

Fix vulnerabilities automatically