https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 09:56:28 +0000 https://cve.radiocsirt.org/vuln/cleanstart-2026-fc13167 <p><strong>Affected:</strong> CleanStart: airflow-3</p> <p>CVE-2026-90467 affects multiple packages. aiosmtplib before 5. See references for individual vulnerability details.</p> <p><strong>Affected:</strong> CleanStart: airflow-3</p> <p>CVE-2026-90467 affects multiple packages. aiosmtplib before 5. See references for individual vulnerability details.</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-fc13167 https://cve.radiocsirt.org/vuln/euvd-2026-368101 EUVD-2026-368101 https://cve.radiocsirt.org/vuln/euvd-2026-368101 https://cve.radiocsirt.org/vuln/fkie_cve-2026-90467 <p>aiosmtplib before 5.1.3 fails to properly validate email addresses supplied by callers, allowing attackers to inject ESMTP parameters into MAIL FROM and RCPT TO command lines. Attackers can craft malicious addresses containing spaces and angle brackets to append parameters like AUTH, NOTIFY, or ORCPT to envelope commands, forging authenticated identities or forcing delivery notifications to third parties.</p> <p>aiosmtplib before 5.1.3 fails to properly validate email addresses supplied by callers, allowing attackers to inject ESMTP parameters into MAIL FROM and RCPT TO command lines. Attackers can craft malicious addresses containing spaces and angle brackets to append parameters like AUTH, NOTIFY, or ORCPT to envelope commands, forging authenticated identities or forcing delivery notifications to third parties.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-90467 https://cve.radiocsirt.org/vuln/ghsa-qh75-x5jv-g7wg <p>aiosmtplib before 5.1.3 fails to properly validate email addresses supplied by callers, allowing attackers to inject ESMTP parameters into MAIL FROM and RCPT TO command lines. Attackers can craft malicious addresses containing spaces and angle brackets to append parameters like AUTH, NOTIFY, or ORCPT to envelope commands, forging authenticated identities or forcing delivery notifications to third parties.</p> <p>aiosmtplib before 5.1.3 fails to properly validate email addresses supplied by callers, allowing attackers to inject ESMTP parameters into MAIL FROM and RCPT TO command lines. Attackers can craft malicious addresses containing spaces and angle brackets to append parameters like AUTH, NOTIFY, or ORCPT to envelope commands, forging authenticated identities or forcing delivery notifications to third parties.</p> https://cve.radiocsirt.org/vuln/ghsa-qh75-x5jv-g7wg https://cve.radiocsirt.org/vuln/opensuse-su-2026:11799-1 <p>python313-aiosmtplib-5.1.3-1.1 on GA media</p> <p>python313-aiosmtplib-5.1.3-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:11799-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-90467 <p><strong>Affected:</strong> Ubuntu:22.04:LTS: aiosmtplib, Ubuntu:26.04:LTS: aiosmtplib</p> <p>aiosmtplib before 5.1.3 fails to properly validate email addresses supplied by callers, allowing attackers to inject ESMTP parameters into MAIL FROM and RCPT TO command lines. Attackers can craft malicious addresses containing spaces and angle brackets to append parameters like AUTH, NOTIFY, or ORCPT to envelope commands, forging authenticated identities or forcing delivery notifications to third parties.</p> <p><strong>Affected:</strong> Ubuntu:22.04:LTS: aiosmtplib, Ubuntu:26.04:LTS: aiosmtplib</p> <p>aiosmtplib before 5.1.3 fails to properly validate email addresses supplied by callers, allowing attackers to inject ESMTP parameters into MAIL FROM and RCPT TO command lines. Attackers can craft malicious addresses containing spaces and angle brackets to append parameters like AUTH, NOTIFY, or ORCPT to envelope commands, forging authenticated identities or forcing delivery notifications to third parties.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-90467