https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T00:20:28.165057+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2019-16791 CVE-2019-16791 — downgrade of effective Strict Transport Security (STS) policy in postfix-mta-sts-resolver 2026-10-07T00:20:28.185413+00:00

Affected: Snawoot postfix-mta-sts-resolver

In postfix-mta-sts-resolver before 0.5.1, All users can receive incorrect response from daemon under rare conditions, rendering downgrade of effective STS policy.

 https://cve.radiocsirt.org/vuln/ghsa-h92m-42h4-82f6 GHSA-h92m-42h4-82f6 — postfix-mta-sts-resolver Algorithm Downgrade vulnerability 2026-10-07T00:20:28.185475+00:00

Affected: PyPI: postfix-mta-sts-resolver

## Incorrect query parsing

### Impact All users of versions prior to 0.5.1 can receive incorrect response from daemon under rare conditions, rendering downgrade of effective STS policy.

### Patches Problem has been patched in version 0.5.1

### Workarounds Users may remediate this vulnerability without upgrading by applying [these patches](https://gist.github.com/Snawoot/b9da85d6b26dea5460673b29df1adc6b) to older suppoorted versions.

### For more information If you have any questions or comments about this advisory: * Open an issue in [postfix-mta-sts-resolver repo](https://github.com/Snawoot/postfix-mta-sts-resolver) * Email me at [vladislav at vm-0 dot com](mailto:vladislav-ex-gh-advisory@vm-0.com)