Threats affecting pkg:github/OpenAlgo

OpenAlgo versions from 1.0.0.29 up to but not including 2.0.3.1 have an improper certificate validation vulnerability in email utility scripts. This flaw disables TLS hostname and certificate checks for STARTTLS and SMTPS, allowing network attackers to present forged certificates. Exploiting this, attackers could intercept SMTP credentials and subsequent emails, including sensitive password-reset links. The issue is fixed in version 2.0.3.1.