Threats affecting pkg:github/marketcalls/openalgo

OpenAlgo versions from 1.0.0.29 up to but not including 2.0.3.1 contain an improper certificate validation vulnerability in the email utility modules. This flaw disables TLS hostname and certificate checks for STARTTLS and SMTPS connections, allowing network attackers to present forged certificates. Successful exploitation can lead to interception of SMTP credentials and subsequent email traffic, including sensitive information such as password-reset links.