critical9.8
CVE-2026-50880
An issue in the sendmail transport integration component of YouTransfer v1.0.6 allows attackers to execute arbitrary code via supplying a crafted request.
Impact
An issue in the sendmail transport integration component of YouTransfer v1.0.6 allows attackers to execute arbitrary code via supplying a crafted request.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | youtransfer | <= 1.0.6 | none recorded |