PyPI/aiosmtplib CVE-2026-53533: medium 6.9, EPSS 0.53%
aiosmtplib vulnerable to SMTP command injection via CR/LF in sender/recipient address
Action: Upgrade aiosmtplib to 5.1.1 or later.
pip install aiosmtplib==5.1.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.1.1 | - |
Fixed versions
| 5.1.1 |
Sources
- osv: PYSEC-2026-2338
- nvd: CVE-2026-53533
- https://github.com/cole/aiosmtplib/security/advisories/GHSA-v3q9-hj7j-63hq
- https://github.com/cole/aiosmtplib
- https://pypi.org/project/aiosmtplib
- https://github.com/advisories/GHSA-v3q9-hj7j-63hq
CVE-2026-53533 · published · modified · JSON