CVE-2021-38189
2 advisories.
crates.io/lettre CVE-2021-38189: critical 9.8, EPSS 1.49%
SMTP command injection in lettre
Action: Upgrade lettre to 0.9.6 or later.
cargo update -p lettre --precise 0.9.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.7.0 | 0.9.6 | - |
Fixed versions
| 0.9.6 |
Sources
- osv: GHSA-qc36-q22q-cjw3
- https://github.com/lettre/lettre/security/advisories/GHSA-qc36-q22q-cjw3
- https://github.com/lettre/lettre/pull/627/commits/93458d01fed0ec81c0e7b4e98e6f35961356fae2
- https://github.com/lettre/lettre/commit/8bfc20506cc5e098fe6eb3d1cafe3bea791215ce
- https://github.com/lettre/lettre
- https://rustsec.org/advisories/RUSTSEC-2021-0069.html
CVE-2021-38189 · published · modified · JSON
crates.io/lettre CVE-2021-38189: unknown, EPSS 1.49%
SMTP command injection in body
Action: Upgrade lettre to 0.9.6 or later.
cargo update -p lettre --precise 0.9.6cargo update -p lettre --precise 0.10.0-rc.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.7.0 | 0.9.6 | - |
| 0.10.0-alpha.1 | 0.10.0-rc.3 | - |
Fixed versions
| 0.9.6 | 0.10.0-rc.3 |
Sources
- osv: RUSTSEC-2021-0069
- https://crates.io/crates/lettre
- https://rustsec.org/advisories/RUSTSEC-2021-0069.html
- https://github.com/lettre/lettre/pull/627/commits/93458d01fed0ec81c0e7b4e98e6f35961356fae2
CVE-2021-38189 · published · modified · JSON