Aiosmtplib
Approved changes feed: RSS · Atom
cpe:2.3:a:cole:aiosmtplib:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Cole (f778f721-3639-5b46-bce9-b547fefaf796) |
|---|---|
| Product | Aiosmtplib (fefb7142-00a4-58ac-9d77-1bc3539ce697) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-90467 |
vulnerable | 2026-09-16 04:33:05.595534 |
aiosmtplib before 5.1.3 ESMTP Parameter Injection via unvalidated addresses
MEDIUM (4)
aiosmtplib before 5.1.3 fails to properly validate email addresses supplied by callers, allowing attackers to inject ESMTP parameters into MAIL FROM and RCPT TO command lines. Attackers can craft malicious addresses containing spaces and angle brackets to append parameters like AUTH, NOTIFY, or ORCPT to envelope commands, forging authenticated identities or forcing delivery notifications to third parties.
Published: 2026-09-12T01:50:34.534Z
Updated: 2026-09-14T18:17:05.398Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.