Threats tagged 'ghsa-4cj2-3xxr-fv5p'

CVE-2026-90513 is a medium severity vulnerability in the simalexan api-lambda-send-email-ses component. It involves missing authentication in the SES.sendEmail function of the API Gateway Endpoint, allowing remote attackers to manipulate email parameters such as toEmails, ccEmails, replyToEmails, subject, and message. The product uses a rolling release model, so no specific affected or fixed versions are available. The vendor has been informed but has not yet responded. A patch is available, and since this is a cloud service, the vendor typically manages remediation server-side.