Skip to content
OpenAdvisories

Vendor

stalwartlabs

6 known vulnerabilities.

Products

stalwart 4 mail-server 2
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.1
    CVE-2026-81036

    Stalwart Mail Server through 0.16.19 Authorization Code Disclosure via Unvalidated OAuth redirect_uri

    Stalwart Mail Server does not compare an OAuth redirect target against any registered destination in its default configuration. The validation routine in crates/http/src/auth/oauth/registration.rs returns success immediately when the client-authentication req…

    stalwartlabs stalwart
  • High 7.5
    CVE-2025-61600

    Unbounded Memory Allocation in Stalwart IMAP parser

    Stalwart is a mail and collaboration server. Versions 0.13.3 and below contain an unbounded memory allocation vulnerability in the IMAP protocol parser which allows remote attackers to exhaust server memory, potentially triggering the system's out-of-memory (…

    stalwartlabs stalwart
  • High 7.1
    CVE-2025-59045

    Stalwart vulnerable to Memory Exhaustion via CalDAV Event Expansion

    Stalwart is a mail and collaboration server. Starting in version 0.12.0 and prior to version 0.13.3, a memory exhaustion vulnerability exists in Stalwart's CalDAV implementation that allows authenticated attackers to cause denial-of-service by triggering unbo…

    stalwartlabs stalwart