TI-2026-29007 CVE-2026-40193 · GHSA-5835-4gvc-32pc
Maddy Mail Server: LDAP Filter Injection via Unsanitized Username
Priority HIGH 75
maddy is a composable, all-in-one mail server.
Vulnerabilities
4 records
TI-2023-12292 CVE-2023-27582 · GHSA-4g76-w3xw-2x6w
Full authentication bypass if SASL authorization username is specified
Priority MEDIUM 51
maddy is a composable, all-in-one mail server.
TI-2022-08546 CVE-2022-24732 · GHSA-6cp7-g972-w9m9
Maddy Mail Server does not implement account expiry
Priority LOW 38
Maddy Mail Server is an open source SMTP compatible email server.
TI-2021-18860 CVE-2021-42583 · GHSA-5r5w-h76p-m726
A Broken or Risky Cryptographic Algorithm exists in Max Mazurov Maddy before 0.5.2, which…
Priority LOW 34
A Broken or Risky Cryptographic Algorithm exists in Max Mazurov Maddy before 0.5.2, which is an unnecessary risk that may result in the exposure of sensitive information.