Skip to content
OpenAdvisories

Package · PyPI

aiosmtplib

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 5.9
    CVE-2026-55558

    aiosmtplib: STARTTLS response injection

    aiosmtplib is an asynchronous SMTP client for use with asyncio. Prior to 5.1.2, SMTPProtocol.start_tls in src/aiosmtplib/protocol.py consumes the server's 220 response and starts the TLS handshake without clearing SMTPProtocol._buffer. An active network attac…

    cole aiosmtplib aiosmtplib aiosmtplib Debian Ubuntu PyPI
  • Medium 6.9
    CVE-2026-53533

    aiosmtplib: SMTP command injection via CR/LF in sender/recipient address

    aiosmtplib is an asynchronous SMTP client for use with asyncio. Prior to 5.1.1, SMTP.mail(), SMTP.rcpt(), SMTP.vrfy(), and SMTP.expn() send caller-supplied addresses without rejecting embedded CR or LF bytes. Data after the line break is framed as additional …

    cole aiosmtplib aiosmtplib aiosmtplib Debian Ubuntu PyPI