TYPO3-EXT-SA-2026-037: Server-Side Request Forgery in extension "Mail" (mail)

PKSA-spg7-jb73-vpnk CVE-2026-120331

Affected package: mediaessenz/mail

Affected version: >=4.0.0,<4.2.0|<3.12.5

Reported by:
FriendsOfPHP/security-advisories