StackRadarChart IndexLive demo

CVE-2026-45068

High

Advisory

Published 27 May 2026In the index since 6 Sept 2026

Severity: High; worst across findings
CVSS: 8.6; base score, highest
EPSS: 0.005; 43rd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 36; of 17,781 indexed, latest versions
Container images: 27; deployed by those charts
Fix available: 2 of 2; affected packages

Symfony has an Argument Injection in SendmailTransport via Dash-Prefixed Recipient Address

Carried by container images the latest versions of 36 of 17,781 indexed charts deploy, on 27 images.

Affected package	Affected versions	Fixed in	Images
symfony/mailercomposer	v4.4.49, v5.3.9, v5.3.14, v5.4.2+17 more	5.4.52, 6.4.40, 7.4.12, 8.0.12	26
symfony/symfonycomposer	v3.4.47	5.4.52	1

OSV records: GHSA-xx3c-qf5g-hc39

Charts affected

36 by stars

Chart

Latest

Affected images

Radar Score

monicamonica

1 of 1 See more

monica monica 1.0.15

1 of the 1 container images this version deploys carry CVE-2026-45068.

Container image	Digest	Package	Fixed in
ghcr.io/monicahq/monica-next :main	8be69156acbb	symfony/mailer@v7.3.2	7.4.12

Open the chart page →

5,634

invoiceninjainvoiceninja

1 of 5 See more

invoiceninja invoiceninja 0.10.2

1 of the 5 container images this version deploys carry CVE-2026-45068.

Container image	Digest	Package	Fixed in
invoiceninja/invoiceninja :5.6.24	1437916dee01	symfony/mailer@v6.3.0	6.4.40

Open the chart page →

2,709

repmanszpadel-charts

1 of 3 See more

repman szpadel-charts 3.52.17

1 of the 3 container images this version deploys carry CVE-2026-45068.

Container image	Digest	Package	Fixed in
buddy/repman :1.4.0	097c897f8b54	symfony/mailer@v5.4.2	5.4.52

Open the chart page →

7,052

typo3christianhuth

1 of 2 See more

typo3 christianhuth 7.7.0

1 of the 2 container images this version deploys carry CVE-2026-45068.

Container image	Digest	Package	Fixed in
martinhelmich/typo3 :12.4	c83a4f3fd7ae	symfony/mailer@v6.4.27	6.4.40

Open the chart page →

8,466

commonground-gatewaycommonground-gateway

1 of 7 See more

commonground-gateway commonground-gateway 1.5.4

1 of the 7 container images this version deploys carry CVE-2026-45068.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/commonground-gateway-php :latest	947882bf2c37	symfony/mailer@v5.3.14	5.4.52

Open the chart page →

9,724

akauntingf3k-tech

1 of 4 See more

akaunting f3k-tech 1.3121.0

1 of the 4 container images this version deploys carry CVE-2026-45068.

Container image	Digest	Package	Fixed in
akaunting/akaunting :3.1.21-fpm-alpine-nginx	e7d5c245b1a0	symfony/mailer@v6.4.27	6.4.40

Open the chart page →

4,333

leantimegissilabs

1 of 2 See more

leantime gissilabs 1.3.0

1 of the 2 container images this version deploys carry CVE-2026-45068.

Container image	Digest	Package	Fixed in
leantime/leantime :3.3.3	ad4bfb0699d3	symfony/mailer@v6.4.13	6.4.40

Open the chart page →

6,416

opencatalogiopencatalogi

1 of 8 See more

opencatalogi opencatalogi 1.0.6

1 of the 8 container images this version deploys carry CVE-2026-45068.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/commonground-gateway-php :latest	947882bf2c37	symfony/mailer@v5.3.14	5.4.52

Open the chart page →

14,838

repmanrepman-helmchart

1 of 3 See more

repman repman-helmchart 1.0.12

1 of the 3 container images this version deploys carry CVE-2026-45068.

Container image	Digest	Package	Fixed in
buddy/repman :1.4.0	097c897f8b54	symfony/mailer@v5.4.2	5.4.52

Open the chart page →

3,596

linkstackadnoctem

1 of 1 See more

linkstack adnoctem 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-45068.

Container image	Digest	Package	Fixed in
linkstackorg/linkstack :latest	1c8b05399ee4	symfony/mailer@v6.0.19	6.4.40

Open the chart page →

2,092

berichtserviceberichtservice

1 of 3 See more

berichtservice berichtservice 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-45068.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/berichtservice-php :latest	ee6a21e66ff0	symfony/mailer@v5.4.8	5.4.52

Open the chart page →

7,342

commonground-gatewaycommonground-gateway-frontend

1 of 4 See more

commonground-gateway commonground-gateway-frontend 0.1.5

1 of the 4 container images this version deploys carry CVE-2026-45068.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/commonground-gateway-php :latest	947882bf2c37	symfony/mailer@v5.3.14	5.4.52

Open the chart page →

2,825

cspconsolecspconsole

1 of 5 See more

cspconsole cspconsole 1.3.11

1 of the 5 container images this version deploys carry CVE-2026-45068.

Container image	Digest	Package	Fixed in
cspconsole/csp-control-center :1.0.10	46dda4a31bd6	symfony/mailer@v6.4.34	6.4.40

Open the chart page →

12,274

webtreesdjjudas21

1 of 1 See more

webtrees djjudas21 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-45068.

Container image	Digest	Package	Fixed in
ghcr.io/nathanvaughn/webtrees :2.2.6	034151b61a80	symfony/mailer@v7.4.8	7.4.12

Open the chart page →

5,966

heimdallegeback

1 of 1 See more

heimdall egeback 2.0.4

1 of the 1 container images this version deploys carry CVE-2026-45068.

Container image	Digest	Package	Fixed in
linuxserver/heimdall :2.6.3	71597f4461e4	symfony/mailer@v6.4.3	6.4.40

Open the chart page →

1,664

espocrmespocrm

1 of 2 See more

espocrm espocrm 1.0.1

1 of the 2 container images this version deploys carry CVE-2026-45068.

Container image	Digest	Package	Fixed in
espocrm/espocrm :9.3.10	1b5a24504ed9	symfony/mailer@v7.4.3	7.4.12

Open the chart page →

6,431

firefly-iiifirefly-iii

1 of 1 See more

firefly-iii firefly-iii 1.10.1

1 of the 1 container images this version deploys carry CVE-2026-45068.

Container image	Digest	Package	Fixed in
fireflyiii/core :version-6.5.9	fe4ecec4c2ba	symfony/mailer@v7.4.6	7.4.12

Open the chart page →

5,039

firefly-iii-stackfirefly-iii

2 of 4 See more

firefly-iii-stack firefly-iii 0.10.2

2 of the 4 container images this version deploys carry CVE-2026-45068.

Container image	Digest	Package	Fixed in
fireflyiii/core :version-6.5.9	fe4ecec4c2ba	symfony/mailer@v7.4.6	7.4.12
fireflyiii/data-importer :version-2.2.3	ab52bf932546	symfony/mailer@v8.0.8	8.0.12

Open the chart page →

10,260

importerfirefly-iii

1 of 1 See more

importer firefly-iii 1.6.0

1 of the 1 container images this version deploys carry CVE-2026-45068.

Container image	Digest	Package	Fixed in
fireflyiii/data-importer :version-2.2.3	ab52bf932546	symfony/mailer@v8.0.8	8.0.12

Open the chart page →

4,829

monicagabe565

1 of 2 See more

monica gabe565 0.10.0

1 of the 2 container images this version deploys carry CVE-2026-45068.

Container image	Digest	Package	Fixed in
library/monica :4.1.2-fpm-alpine	6d1b2bd0947e	symfony/mailer@v6.4.7	6.4.40

Open the chart page →

1,173

anonaddygeek-cookbook

1 of 1 See more

anonaddy geek-cookbook 6.0.0

1 of the 1 container images this version deploys carry CVE-2026-45068.

Container image	Digest	Package	Fixed in
anonaddy/anonaddy :0.12.3	957a95565166	symfony/mailer@v6.1.2	6.4.40

Open the chart page →

4,788

wallabaggeek-cookbook

1 of 1 See more

wallabag geek-cookbook 7.2.0

1 of the 1 container images this version deploys carry CVE-2026-45068.

Container image	Digest	Package	Fixed in
wallabag/wallabag :2.4.2	5e4c26a7fb4a	symfony/symfony@v3.4.47	5.4.52

Open the chart page →

4,358

wallabaghelmforge

1 of 3 See more

wallabag helmforge 1.3.6

1 of the 3 container images this version deploys carry CVE-2026-45068.

Container image	Digest	Package	Fixed in
wallabag/wallabag :2.6.14	4a527e027e0d	symfony/mailer@v4.4.49	5.4.52

Open the chart page →

2,762

1 of 1 See more

wallabag hp 0.1.7

1 of the 1 container images this version deploys carry CVE-2026-45068.

Container image	Digest	Package	Fixed in
wallabag/wallabag :2.6.14	4a527e027e0d	symfony/mailer@v4.4.49	5.4.52

Open the chart page →

1,136

akauntingnas-helm-charts

1 of 2 See more

akaunting nas-helm-charts 1.0.3

1 of the 2 container images this version deploys carry CVE-2026-45068.

Container image	Digest	Package	Fixed in
akaunting/akaunting :3.0.15	52811b36ec3a	symfony/mailer@v6.3.0	6.4.40

Open the chart page →

12,813

librenmsnimbolus

1 of 3 See more

librenms nimbolus 0.5.1

1 of the 3 container images this version deploys carry CVE-2026-45068.

Container image	Digest	Package	Fixed in
librenms/librenms :24.11.0	0920bc9117a8	symfony/mailer@v6.4.13	6.4.40

Open the chart page →

2,293

commonground-gatewayopencatalogi

1 of 7 See more

commonground-gateway opencatalogi 1.5.3

1 of the 7 container images this version deploys carry CVE-2026-45068.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/commonground-gateway-php :latest	947882bf2c37	symfony/mailer@v5.3.14	5.4.52

Open the chart page →

9,724

firefly-iiiphntom

1 of 2 See more

firefly-iii phntom 0.2.10

1 of the 2 container images this version deploys carry CVE-2026-45068.

Container image	Digest	Package	Fixed in
phntom/fireflyiii :version-5.7.5	f881ea5fbbf1	symfony/mailer@v6.0.8	6.4.40

Open the chart page →

1,813

1 of 6 See more

shopware robjuz 2.0.0

1 of the 6 container images this version deploys carry CVE-2026-45068.

Container image	Digest	Package	Fixed in
shyim/shopware :6.4.6.0	a951c0e6b836	symfony/mailer@v5.3.9	5.4.52

Open the chart page →

2,972

nextcloudsb-helm-charts

1 of 2 See more

nextcloud sb-helm-charts 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-45068.

Container image	Digest	Package	Fixed in
library/nextcloud :31.0.10-apache	b7faa1653c39	symfony/mailer@v6.4.18	6.4.40

Open the chart page →

9,755

snipeitschmitzis

1 of 2 See more

snipeit schmitzis 6.1.0

1 of the 2 container images this version deploys carry CVE-2026-45068.

Container image	Digest	Package	Fixed in
snipe/snipe-it :v8.3.1	141ebf2386fe	symfony/mailer@v7.3.1	7.4.12

Open the chart page →

6,094

wallabagsebtiz13-charts

1 of 1 See more

wallabag sebtiz13-charts 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-45068.

Container image	Digest	Package	Fixed in
wallabag/wallabag :2.6.14	4a527e027e0d	symfony/mailer@v4.4.49	5.4.52

Open the chart page →

1,136

commonground-gatewayskeleton-pip

1 of 5 See more

commonground-gateway skeleton-pip 0.1.7

1 of the 5 container images this version deploys carry CVE-2026-45068.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/commonground-gateway-php :latest	947882bf2c37	symfony/mailer@v5.3.14	5.4.52

Open the chart page →

2,825

repmanteam-blue

1 of 5 See more

repman team-blue 0.3.0

1 of the 5 container images this version deploys carry CVE-2026-45068.

Container image	Digest	Package	Fixed in
buddy/repman :1.4.0	097c897f8b54	symfony/mailer@v5.4.2	5.4.52

Open the chart page →

3,993

nextcloudth-charts

1 of 1 See more

nextcloud th-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-45068.

Container image	Digest	Package	Fixed in
library/nextcloud :31.0.6-apache	588609d76b21	symfony/mailer@v6.4.18	6.4.40

Open the chart page →

10,086

xboardxboard

1 of 1 See more

xboard xboard 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-45068.

Container image	Digest	Package	Fixed in
ghcr.io/cedar2025/xboard :latest	896e4926e0d7	symfony/mailer@v7.4.6	7.4.12

Open the chart page →

1,042

Container images carrying it

27 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/conductionnl/commonground-gateway-php :latest	947882bf2c37	symfony/mailer@v5.3.14	5.4.52	5
buddy/repman :1.4.0	097c897f8b54	symfony/mailer@v5.4.2	5.4.52	3
wallabag/wallabag :2.6.14	4a527e027e0d	symfony/mailer@v4.4.49	5.4.52	3
fireflyiii/core :version-6.5.9	fe4ecec4c2ba	symfony/mailer@v7.4.6	7.4.12	2
fireflyiii/data-importer :version-2.2.3	ab52bf932546	symfony/mailer@v8.0.8	8.0.12	2
akaunting/akaunting :3.0.15	52811b36ec3a	symfony/mailer@v6.3.0	6.4.40	1
akaunting/akaunting :3.1.21-fpm-alpine-nginx	e7d5c245b1a0	symfony/mailer@v6.4.27	6.4.40	1
anonaddy/anonaddy :0.12.3	957a95565166	symfony/mailer@v6.1.2	6.4.40	1
cspconsole/csp-control-center :1.0.10	46dda4a31bd6	symfony/mailer@v6.4.34	6.4.40	1
espocrm/espocrm :9.3.10	1b5a24504ed9	symfony/mailer@v7.4.3	7.4.12	1
invoiceninja/invoiceninja :5.6.24	1437916dee01	symfony/mailer@v6.3.0	6.4.40	1
leantime/leantime :3.3.3	ad4bfb0699d3	symfony/mailer@v6.4.13	6.4.40	1
library/monica :4.1.2-fpm-alpine	6d1b2bd0947e	symfony/mailer@v6.4.7	6.4.40	1
library/nextcloud :31.0.6-apache	588609d76b21	symfony/mailer@v6.4.18	6.4.40	1
library/nextcloud :31.0.10-apache	b7faa1653c39	symfony/mailer@v6.4.18	6.4.40	1
librenms/librenms :24.11.0	0920bc9117a8	symfony/mailer@v6.4.13	6.4.40	1
linkstackorg/linkstack :latest	1c8b05399ee4	symfony/mailer@v6.0.19	6.4.40	1
linuxserver/heimdall :2.6.3	71597f4461e4	symfony/mailer@v6.4.3	6.4.40	1
martinhelmich/typo3 :12.4	c83a4f3fd7ae	symfony/mailer@v6.4.27	6.4.40	1
phntom/fireflyiii :version-5.7.5	f881ea5fbbf1	symfony/mailer@v6.0.8	6.4.40	1
shyim/shopware :6.4.6.0	a951c0e6b836	symfony/mailer@v5.3.9	5.4.52	1
snipe/snipe-it :v8.3.1	141ebf2386fe	symfony/mailer@v7.3.1	7.4.12	1
wallabag/wallabag :2.4.2	5e4c26a7fb4a	symfony/symfony@v3.4.47	5.4.52	1
ghcr.io/cedar2025/xboard :latest	896e4926e0d7	symfony/mailer@v7.4.6	7.4.12	1
ghcr.io/conductionnl/berichtservice-php :latest	ee6a21e66ff0	symfony/mailer@v5.4.8	5.4.52	1
ghcr.io/monicahq/monica-next :main	8be69156acbb	symfony/mailer@v7.3.2	7.4.12	1
ghcr.io/nathanvaughn/webtrees :2.2.6	034151b61a80	symfony/mailer@v7.4.8	7.4.12	1