Skip to content
OpenAdvisories

Package · Go

github.com/foxcpp/maddy

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.2
    CVE-2026-40193

    Maddy Mail Server: LDAP Filter Injection via Unsanitized Username

    maddy is a composable, all-in-one mail server. Versions prior to 0.9.3 contain an LDAP injection vulnerability in the auth.ldap module where user-supplied usernames are interpolated into LDAP search filters and DN strings via strings.ReplaceAll() without any …

    foxcpp maddy github.com/foxcpp/maddy maddy Alpine Go
  • High —
    CVE-2021-42583

    Use of a Broken or Risky Cryptographic Algorithm in Max Mazurov Maddy

    A Broken or Risky Cryptographic Algorithm exists in Max Mazurov Maddy before 0.5.2, which is an unnecessary risk that may result in the exposure of sensitive information.

    github.com/foxcpp/maddy Go
  • High 7.5
    GHSA-m6m5-pp4g-fcc8

    S3 storage write is not aborted on errors leading to unbounded memory usage

    ### Impact Anyone using storage.blob.s3 introduced in 0.5.0 with storage.imapsql. ``` storage.imapsql local_mailboxes { ... msg_store s3 { ... } } ``` ### Patches The relevant commit is pushed to master and will be included in the 0.5.1 release. No special ha…

    github.com/foxcpp/maddy Go