PHPMailer contained a vulnerability that can result in untrusted code being called (CVE-2021-3603).
See upstream release notes.
{ "section": "core" }
"https://advisories.mageia.org/MGASA-2021-0345.json"