TI-2026-38606 CVE-2026-53533 · GHSA-v3q9-hj7j-63hq
aiosmtplib: SMTP command injection via CR/LF in sender/recipient address
Priority LOW 31
aiosmtplib is an asynchronous SMTP client for use with asyncio.
cole
Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
cole records in CISA KEVNo cole vulnerabilities are listed in CISA KEV.
Records
3 records
TI-2026-61498 CVE-2026-90467 · GHSA-qh75-x5jv-g7wg
aiosmtplib before 5.1.3 ESMTP Parameter Injection via unvalidated addresses
Priority LOW 28
aiosmtplib before 5.1.3 fails to properly validate email addresses supplied by callers, allowing attackers to inject ESMTP parameters into MAIL FROM and RCPT TO command lines.
TI-2026-40102 CVE-2026-55558 · GHSA-vxj7-4xrp-5vr4
aiosmtplib: STARTTLS response injection
Priority LOW 27
aiosmtplib is an asynchronous SMTP client for use with asyncio.