PHPMailer before 6.1.6 contains an output escaping bug when the name of a file attachment contains a double quote character. This can result in the file type being misinterpreted by the receiver or any mail relay processing the message.
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2020-13625.json"