Approved changes feed: RSS · Atom
cpe:2.3:a:mutt:mutt:-:*:*:*:*:*:*:*
part: a version: - update: *
| Vendor | Mutt (8d049cd7-bc69-5f44-93e6-1dbaf65270ac) |
|---|---|
| Product | Mutt (ed9771c9-1df1-58ed-87e5-c8d9add0ea56) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:bitbucket/mutt/mutt |
purl2cpe | 2026-06-01 10:11:48.333299 |
pkg:deb/debian/mutt |
purl2cpe | 2026-06-01 10:11:48.333300 |
pkg:deb/ubuntu/mutt |
purl2cpe | 2026-06-01 10:11:48.333302 |
pkg:github/muttmua/mutt |
purl2cpe | 2026-06-01 10:11:48.333303 |
pkg:gitlab/muttmua/mutt |
purl2cpe | 2026-06-01 10:11:48.333304 |
pkg:rpm/fedora/mutt |
purl2cpe | 2026-06-01 10:11:48.333306 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-49395 |
vulnerable | 2026-06-08 06:50:13.796319 |
Mutt: neomutt: bcc email header field is indirectly leaked by cryptographic info block
MEDIUM (5.3)
In mutt and neomutt, PGP encryption does not use the --hidden-recipient mode which may leak the Bcc email header field by inferring from the recipients info.
Published: 2024-11-12T02:08:03.548Z
Updated: 2026-06-26T01:22:16.276Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-49394 |
vulnerable | 2026-06-08 06:50:13.794389 |
Mutt: neomutt: in-reply-to email header field it not protected by cryptograpic signing
MEDIUM (5.3)
In mutt and neomutt the In-Reply-To email header field is not protected by cryptographic signing which allows an attacker to reuse an unencrypted but signed email message to impersonate the original sender.
Published: 2024-11-12T02:07:19.551Z
Updated: 2026-06-26T01:22:14.764Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-49393 |
vulnerable | 2026-06-08 06:50:13.789970 |
Mutt: neomutt: to and cc email header fields are not protected by cryptographic signing
MEDIUM (6.5)
In neomutt and mutt, the To and Cc email headers are not validated by cryptographic signing which allows an attacker that intercepts a message to change their value and include himself as a one of the recipients to compromise message confidentiality.
Published: 2024-11-12T01:55:40.765Z
Updated: 2026-06-26T01:22:10.365Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.