Vulnerabilities

TI-2026-29007 CVE-2026-40193 · GHSA-5835-4gvc-32pc

Maddy Mail Server: LDAP Filter Injection via Unsanitized Username

HIGH 75

maddy is a composable, all-in-one mail server.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00419 Published 2026-04-15 Fixed in 0.9.3 CWE-90

TI-2023-12292 CVE-2023-27582 · GHSA-4g76-w3xw-2x6w

MEDIUM 51

maddy is a composable, all-in-one mail server.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01019 Published 2023-03-13 Fixed in 0.6.3 CWE-287

TI-2022-08546 CVE-2022-24732 · GHSA-6cp7-g972-w9m9

LOW 38

Maddy Mail Server is an open source SMTP compatible email server.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00409 Published 2022-03-09 Fixed in 0.5.4 CWE-324