Is swiftmailer/swiftmailer 6.0 vulnerable?
Composer · 3 releases from 6.0.0 to 6.0.2 · latest swiftmailer/swiftmailer is 6.3.0 · checked 1 Nov 2026
Yes: 1 known advisory
Yes. swiftmailer/swiftmailer 6.0.2, the last 6.0 release, is affected by 1 known security advisory (1 medium), including CVE-2024-28859. Upgrade to 6.2.5 or later to fix all of them.
Upgrade with:
composer require swiftmailer/swiftmailer:^6.2.5Advisories affecting swiftmailer/swiftmailer 6.0.2
Gadget chain in Symfony 1 due to vulnerable Swift Mailer dependency
- Affected
- >=4.0.0 <6.2.5
- Fixed in
- 6.2.5
Which of your client projects are still on swiftmailer/swiftmailer 6.0?
NPMscan reads the lockfiles in every GitHub repo you pick, finds the exact swiftmailer/swiftmailer version each one installs, and checks it against these advisories. Each finding comes with the command that fixes it.
Other swiftmailer/swiftmailer versions
- swiftmailer/swiftmailer 6.3
- swiftmailer/swiftmailer 6.2
- swiftmailer/swiftmailer 6.1
- swiftmailer/swiftmailer 5.4
- swiftmailer/swiftmailer 5.3
- swiftmailer/swiftmailer 5.2
- swiftmailer/swiftmailer 5.1
- swiftmailer/swiftmailer 5.0
- swiftmailer/swiftmailer 4.3
- swiftmailer/swiftmailer 4.2
- swiftmailer/swiftmailer 4.1
- All swiftmailer/swiftmailer advisories
Advisory data from OSV.dev (opens OSV.dev in a new tab), which includes the GitHub Advisory Database. Release list from the Composer registry. Refreshed daily.