Skip to content
OpenAdvisories

Package · NuGet

MailKit

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium 6.5
    CVE-2026-41319

    MailKit has STARTTLS Response Injection via unflushed stream buffer that enables SASL mechanism downgrade

    MailKit is a cross-platform mail client library built on top of MimeKit. A STARTTLS Response Injection vulnerability in versions prior to 4.16.0 allows a Man-in-the-Middle attacker to inject arbitrary protocol responses across the plaintext-to-TLS trust bound…

    jstedfast MailKit MailKit NuGet