@agenticmail/api vulnerabilities

2 known vulnerabilities in @agenticmail/api from Agenticmail. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  @agenticmail/api: Authorization Bypass Through User-Controlled Key

  CVE-2026-57494Jul 20, 2026Agenticmail

  AgenticMail gives AI agents real email addresses and phone numbers. In @agenticmail/api prior to version 0.9.64, a low-privileged authenticated AgenticMail agent can enumerate another agent's pending/claimed tasks by supplying the target agent name to `GET /ap

• 8.2 High severity

  AgenticMail gives AI agents real email addresses and phone numbers. @agenticmail/api prior to…

  CVE-2026-47255Jul 20, 2026Agenticmail

  AgenticMail gives AI agents real email addresses and phone numbers. @agenticmail/api prior to version 0.9.32 and @agenticmail/core prior to version 0.9.10 had weakness related to validation and and binding of inactive-agent hour filtering; storage SQL identifi