crates.io/lettre CVE-2021-38189: critical 9.8, EPSS 1.49%

SMTP command injection in lettre

Action: Upgrade lettre to 0.9.6 or later.

cargo update -p lettre --precise 0.9.6

Affected

Fixed versions

Sources

• osv: GHSA-qc36-q22q-cjw3
• https://github.com/lettre/lettre/security/advisories/GHSA-qc36-q22q-cjw3
• https://github.com/lettre/lettre/pull/627/commits/93458d01fed0ec81c0e7b4e98e6f35961356fae2
• https://github.com/lettre/lettre/commit/8bfc20506cc5e098fe6eb3d1cafe3bea791215ce
• https://github.com/lettre/lettre
• https://rustsec.org/advisories/RUSTSEC-2021-0069.html

CVE-2021-38189 · published 2021-07-12T17:03:27Z · modified 2023-11-08T04:06:25.799670Z · JSON