tocsin

CVE-2020-28247

2 advisories.

crates.io/lettre CVE-2020-28247: medium 5.3

Argument injection in lettre

Action: Upgrade lettre to 0.7.1 or later.

cargo update -p lettre --precise 0.9.5
cargo update -p lettre --precise 0.8.4
cargo update -p lettre --precise 0.7.1

Affected

introducedfixedlast affected
0.9.00.9.5-
0.8.00.8.4-
0.7.00.7.1-

Fixed versions

0.9.50.8.40.7.1

Sources

CVE-2020-28247 · published · modified · JSON

crates.io/lettre CVE-2020-28247: medium 5.3

Argument injection in sendmail transport

Action: Upgrade lettre to 0.7.1 or later.

cargo update -p lettre --precise 0.7.1
cargo update -p lettre --precise 0.8.4
cargo update -p lettre --precise 0.9.5
cargo update -p lettre --precise 0.10.0-alpha.4

Affected

introducedfixedlast affected
0.7.00.7.1-
0.8.00.8.4-
0.9.00.9.5-
0.10.0-alpha.10.10.0-alpha.4-

Fixed versions

0.7.10.8.40.9.50.10.0-alpha.4

Sources

CVE-2020-28247 · published · modified · JSON