Linux Distros Unpatched Vulnerability : CVE-2026-53533

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - aiosmtplib is an asynchronous SMTP client for use with asyncio. Prior to 5.1.1, SMTP.mail, SMTP.rcpt, SMTP.vrfy, and SMTP.expn send caller-supplied addresses...

CVE-2026-53533 aiosmtplib: SMTP command injection via CR/LF in sender/recipient address

aiosmtplib is an asynchronous SMTP client for use with asyncio. Prior to 5.1.1, SMTP.mail, SMTP.rcpt, SMTP.vrfy, and SMTP.expn send caller-supplied addresses without rejecting embedded CR or LF bytes. Data after the line break is framed as additional standalone SMTP command lines, allowing an...

CVE-2026-53533

aiosmtplib's SMTP.mail(), SMTP.rcpt(), SMTP.vrfy(), and SMTP.expn() methods transmit caller-supplied addresses without filtering CR/LF bytes, allowing SMTP command injection (CWE-93/CWE-77) when attacker-influenced addresses are passed. This enables desynchronization, client hangs, or arbitrary m...

CVE-2026-53533 aiosmtplib: SMTP command injection via CR/LF in sender/recipient address

aiosmtplib is an asynchronous SMTP client for use with asyncio. Prior to 5.1.1, SMTP.mail, SMTP.rcpt, SMTP.vrfy, and SMTP.expn send caller-supplied addresses without rejecting embedded CR or LF bytes. Data after the line break is framed as additional standalone SMTP command lines, allowing an...

python311-aiosmtplib-5.1.1-1.1 on GA media (moderate)

python311-aiosmtplib-5.1.1-1.1 on GA media Announcement ID: openSUSE-SU-2026:11035-1 Rating: moderate Cross-References: CVE-2026-53533 CVSS scores: CVE-2026-53533 SUSE : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N CVE-2026-53533 SUSE : 6.9...

SUSE CVE-2026-53533

aiosmtplib is an asynchronous SMTP client for use with asyncio. Prior to 5.1.1, SMTP.mail, SMTP.rcpt, SMTP.vrfy, and SMTP.expn send caller-supplied addresses without rejecting embedded CR or LF bytes. Data after the line break is framed as additional standalone SMTP command lines, allowing an...