https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-11T13:34:35.743182+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cnvd-2019-41238 cnvd-2019-41238 2026-10-11T13:34:35.746858+00:00 cnvd-2019-41238 https://vulnerability.circl.lu/vuln/fkie_cve-2019-16698 fkie_cve-2019-16698 2026-10-11T13:34:35.746905+00:00

The direct_mail (aka Direct Mail) extension through 5.2.2 for TYPO3 has a missing access check in the backend module, allowing a user (with restricted permissions to the fe_users table) to view and export data of frontend users who are subscribed to a newsletter.

 https://vulnerability.circl.lu/vuln/ghsa-j2w4-45qm-r674 GHSA-j2w4-45qm-r674 — direct_mail for Typo3 sensitive data exposure 2026-10-11T13:34:35.746946+00:00

Affected: Packagist: directmailteam/direct-mail

The direct_mail (aka Direct Mail) extension through 5.2.2 for TYPO3 has a missing access check in the backend module, allowing a user (with restricted permissions to the fe_users table) to view and export data of frontend users who are subscribed to a newsletter.

 https://vulnerability.circl.lu/vuln/gsd-2019-16698 gsd-2019-16698 2026-10-11T13:34:35.746988+00:00 gsd-2019-16698