Approved changes feed: RSS · Atom

cpe:2.3:a:mutt:mutt:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMutt (8d049cd7-bc69-5f44-93e6-1dbaf65270ac)
ProductMutt (ed9771c9-1df1-58ed-87e5-c8d9add0ea56)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:bitbucket/mutt/mutt purl2cpe 2026-06-01 10:11:48.331430
pkg:deb/debian/mutt purl2cpe 2026-06-01 10:11:48.331432
pkg:deb/ubuntu/mutt purl2cpe 2026-06-01 10:11:48.331433
pkg:github/muttmua/mutt purl2cpe 2026-06-01 10:11:48.331434
pkg:gitlab/muttmua/mutt purl2cpe 2026-06-01 10:11:48.331436
pkg:rpm/fedora/mutt purl2cpe 2026-06-01 10:11:48.331437

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-43864 vulnerable 2026-06-08 08:03:17.973829 Details available
LOW (2.5)
mutt before 2.3.2 has a show_sig_summary NULL pointer dereference.
Published: 2026-05-04T06:10:52.725Z
Updated: 2026-05-04T18:26:15.822Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-43863 vulnerable 2026-06-08 08:03:17.973621 Details available
LOW (3.7)
mutt before 2.3.2 has an infinite loop in data_object_to_stream in crypt-gpgme.c.
Published: 2026-05-04T06:05:53.300Z
Updated: 2026-05-04T18:25:49.692Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-43862 vulnerable 2026-06-08 08:03:17.973288 Details available
LOW (3.7)
In mutt before 2.3.2, the imap_auth_gss security level is mishandled.
Published: 2026-05-04T06:00:46.368Z
Updated: 2026-05-04T18:21:26.993Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-43861 vulnerable 2026-06-08 08:03:17.972924 Details available
LOW (3.7)
mutt before 2.3.2 does not check for '\0' in url_pct_decode.
Published: 2026-05-04T05:52:59.642Z
Updated: 2026-05-04T18:20:52.988Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-43860 vulnerable 2026-06-08 08:03:17.972680 Details available
LOW (3.7)
mutt before 2.3.2 sometimes truncates the hash_passwd by one byte for IMAP auth_cram MD5 digest.
Published: 2026-05-04T05:45:05.581Z
Updated: 2026-05-04T18:20:29.272Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-43859 vulnerable 2026-06-08 08:03:17.972378 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4875 vulnerable 2026-06-08 06:16:14.786986 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4874 vulnerable 2026-06-08 06:16:14.786175 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-1328 vulnerable 2026-06-08 05:39:12.744499 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-3181 vulnerable 2026-06-08 05:33:50.965843 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-32055 vulnerable 2026-06-08 05:31:54.661703 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-28896 vulnerable 2026-06-08 05:23:56.555507 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-14954 vulnerable 2026-06-08 05:19:25.025823 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-14154 vulnerable 2026-06-08 05:18:02.114209 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-14093 vulnerable 2026-06-08 05:18:02.013747 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-14362 vulnerable 2026-06-08 05:10:52.817739 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-14359 vulnerable 2026-06-08 05:10:52.816091 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-14358 vulnerable 2026-06-08 05:10:52.815201 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-14357 vulnerable 2026-06-08 05:10:52.814285 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-14356 vulnerable 2026-06-08 05:10:52.813583 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-14355 vulnerable 2026-06-08 05:10:52.812773 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-14354 vulnerable 2026-06-08 05:10:52.804038 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-14353 vulnerable 2026-06-08 05:10:52.803093 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-14352 vulnerable 2026-06-08 05:10:52.802395 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-14351 vulnerable 2026-06-08 05:10:52.801622 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-14350 vulnerable 2026-06-08 05:10:52.799671 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-14349 vulnerable 2026-06-08 05:10:52.797992 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-0467 vulnerable 2026-06-08 05:05:12.894237 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1429 vulnerable 2026-06-08 04:57:59.204472 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3766 vulnerable 2026-06-08 04:51:44.161520 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-1268 vulnerable 2026-06-08 04:49:41.924610 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-5298 vulnerable 2026-06-08 04:49:20.259407 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-5297 vulnerable 2026-06-08 04:49:20.245614 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-2351 vulnerable 2026-06-08 04:48:29.089785 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-0001 vulnerable 2026-06-08 04:46:20.334037 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2001-0473 vulnerable 2026-06-08 04:45:20.325958 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.