auth icon indicating copy to clipboard operation
auth copied to clipboard

Time to update the code?

Open Neustradamus opened this issue 1 year ago • 2 comments

Dear all, it is possible to change your code? Change from here:

  • https://github.com/go-gomail/gomail
  • https://github.com/go-gomail/gomail/issues/188
  • https://github.com/go-mail/mail
  • https://github.com/Shopify/gomail
  • https://github.com/Shopify/gomail/issues/59
  • https://github.com/ory/mail

It has been unmaintained and maybe one or more vulnerabilities :/

There are:

  • https://github.com/xhit/go-simple-mail from @xhit
  • https://github.com/wneessen/go-mail from @wneessen

Linked to:

  • https://github.com/go-gomail/gomail/issues/182

Neustradamus avatar Nov 23 '24 01:11 Neustradamus

Thank you, replacing this package is a long term goal for us but not something we are actively working on. A known vulnerability could make this a priority, but following through the links I can't find one. Do you have a link to a CVE / Vulnerability?

cstockton avatar Dec 12 '24 23:12 cstockton

@cstockton: No link, the author has not published, please read publications but it must be changed:

  • https://github.com/go-gomail/gomail/issues/188
  • https://github.com/Shopify/gomail/issues/59

Neustradamus avatar Dec 13 '24 00:12 Neustradamus