Skip to content
OpenAdvisories

Vendor

stalwartlabs

6 known vulnerabilities.

Products

stalwart 4 mail-server 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-26312

    Stalwart Mail Server has Out-of-Memory Denial of Service via Malformed Nested MIME Messages

    Stalwart is a mail and collaboration server. A denial-of-service vulnerability exists in Stalwart Mail Server versions 0.13.0 through 0.15.4 where accessing a specially crafted email containing malformed nested `message/rfc822` MIME parts via IMAP or JMAP cau…

    stalwartlabs stalwart
  • Medium 6.8
    CVE-2024-35179

    Unprivileged Stalwart Mail Server user can read files as root

    Stalwart Mail Server is an open-source mail server. Prior to version 0.8.0, when using `RUN_AS_USER`, the specified user (and therefore, web interface admins) can read arbitrary files as root. This issue affects admins who have set up to run stalwart with `RU…

    stalwartlabs mail-server