https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T22:19:19.132779+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cleanstart-2023-ld05714 CLEANSTART-2023-LD05714 — GNOME Geary before 3 2026-10-17T22:19:19.136775+00:00

Affected: CleanStart: geary

Security vulnerability affects the geary package. GNOME Geary before 3.

 https://cve.radiocsirt.org/vuln/euvd-2026-45219 EUVD-2026-45219 2026-10-17T22:19:19.136826+00:00 EUVD-2026-45219 https://cve.radiocsirt.org/vuln/fkie_cve-2020-24661 fkie_cve-2020-24661 2026-10-17T22:19:19.136843+00:00

GNOME Geary before 3.36.3 mishandles pinned TLS certificate verification for IMAP and SMTP services using invalid TLS certificates (e.g., self-signed certificates) when the client system is not configured to use a system-provided PKCS#11 store. This allows a meddler in the middle to present a different invalid certificate to intercept incoming and outgoing mail.

 https://cve.radiocsirt.org/vuln/ghsa-9q4r-jrvx-7p2q GHSA-9q4r-jrvx-7p2q 2026-10-17T22:19:19.136867+00:00

GNOME Geary before 3.36.3 mishandles pinned TLS certificate verification for IMAP and SMTP services using invalid TLS certificates (e.g., self-signed certificates) when the client system is not configured to use a system-provided PKCS#11 store. This allows a meddler in the middle to present a different invalid certificate to intercept incoming and outgoing mail.

 https://cve.radiocsirt.org/vuln/gsd-2020-24661 gsd-2020-24661 2026-10-17T22:19:19.136883+00:00 gsd-2020-24661 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10781-1 openSUSE-SU-2024:10781-1 — geary-40.0-1.4 on GA media 2026-10-17T22:19:19.136894+00:00

geary-40.0-1.4 on GA media

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-24661 UBUNTU-CVE-2020-24661 2026-10-17T22:19:19.136910+00:00

Affected: Ubuntu:16.04:LTS: geary, Ubuntu:18.04:LTS: geary, Ubuntu:20.04:LTS: geary

GNOME Geary before 3.36.3 mishandles pinned TLS certificate verification for IMAP and SMTP services using invalid TLS certificates (e.g., self-signed certificates) when the client system is not configured to use a system-provided PKCS#11 store. This allows a meddler in the middle to present a different invalid certificate to intercept incoming and outgoing mail.