lettre

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

lettre records in CISA KEV

No lettre vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Lettre · all components

TI-2021-15866 CVE-2021-38189 · GHSA-qc36-q22q-cjw3

MEDIUM 45

An issue was discovered in the lettre crate before 0.9.6 for Rust.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01494 Published 2021-08-08 Fixed in 0.9.6 CWE-77

TI-2020-17156 CVE-2020-28247 · GHSA-vc2p-r46x-m3vx

LOW 27

The lettre library through 0.10.0-alpha for Rust allows arbitrary sendmail option injection via transport/sendmail/mod.rs.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01522 Published 2020-11-12 Fixed in 0.9.5, 0.8.4 +1 CWE-77