PatchTheCVEnylas mail vulnerabilities and fixes
Recent CVEs affecting nylas mail, with upgrade or downgrade steps. 1 tracked.
Also searched as: nylasmail.
nylas mail has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2018-01-03. Highest priority: CVE-2017-1000485 (score 34/100).
- CVE-2017-1000485 HIGH 7.8 DOWNGRADE Nylas Mail Lives 2.2.2 uses 0755 permissions for $HOME/.nylas-mail, which allows local users to obtain sensiti
FAQ
How do I fix nylas mail vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is nylas mail being exploited right now?
None of the tracked nylas mail CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which nylas mail CVE should I patch first?
CVE-2017-1000485 currently ranks highest (34/100): Nylas Mail Lives 2.2.2 uses 0755 permissions for $HOME/.nylas-mail, which allows local users to obtain sensiti.