Linux Distros Unpatched Vulnerability : CVE-2026-53533

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - aiosmtplib is an asynchronous SMTP client for use with asyncio. Prior to 5.1.1, SMTP.mail, SMTP.rcpt, SMTP.vrfy, and SMTP.expn send caller-supplied addresses...

CVE-2026-53533

aiosmtplib's SMTP.mail(), SMTP.rcpt(), SMTP.vrfy(), and SMTP.expn() methods transmit caller-supplied addresses without filtering CR/LF bytes, allowing SMTP command injection (CWE-93/CWE-77) when attacker-influenced addresses are passed. This enables desynchronization, client hangs, or arbitrary m...

CVE-2026-53533 aiosmtplib: SMTP command injection via CR/LF in sender/recipient address

aiosmtplib is an asynchronous SMTP client for use with asyncio. Prior to 5.1.1, SMTP.mail, SMTP.rcpt, SMTP.vrfy, and SMTP.expn send caller-supplied addresses without rejecting embedded CR or LF bytes. Data after the line break is framed as additional standalone SMTP command lines, allowing an...

CVE-2026-53533 aiosmtplib: SMTP command injection via CR/LF in sender/recipient address

aiosmtplib is an asynchronous SMTP client for use with asyncio. Prior to 5.1.1, SMTP.mail, SMTP.rcpt, SMTP.vrfy, and SMTP.expn send caller-supplied addresses without rejecting embedded CR or LF bytes. Data after the line break is framed as additional standalone SMTP command lines, allowing an...

CVE-2026-53533 aiosmtplib: SMTP command injection via CR/LF in sender/recipient address

aiosmtplib is an asynchronous SMTP client for use with asyncio. Prior to 5.1.1, SMTP.mail, SMTP.rcpt, SMTP.vrfy, and SMTP.expn send caller-supplied addresses without rejecting embedded CR or LF bytes. Data after the line break is framed as additional standalone SMTP command lines, allowing an...

ax (>=0.43.0, <=0.52.0), foambo (>=0.0.1, <=0.0.6) +2 more potentially affected by CVE-2026-53533 via aiosmtplib (1.1.2)

aiosmtplib PYPI version 1.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on aiosmtplib and may be impacted: - ax =0.43.0, =0.0.1, =0.1.1, =2024.10.27.post1, =2024.12.29.post2 Source cves: CVE-2026-53533 Source advisory: OSV:PYSEC-2026-2338...

async-sender (1.3.3) potentially affected by CVE-2026-53533 via aiosmtplib (1.0.4)

aiosmtplib PYPI version 1.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on aiosmtplib and may be impacted: - async-sender 1.3.3 Source cves: CVE-2026-53533 Source advisory: OSV:PYSEC-2026-2338...

async-sender (>=1.4.0, <=1.4.1), ax (>=0.39.0, <=0.42.0) potentially affected by CVE-2026-53533 via aiosmtplib (1.1.0)

aiosmtplib PYPI version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on aiosmtplib and may be impacted: - async-sender =1.4.0, =0.39.0, =0.42.0 Source cves: CVE-2026-53533 Source advisory: OSV:PYSEC-2026-2338...

alert-msgs (0.8.1), arpakitlib (>=1.9.5, <=1.9.61) +21 more potentially affected by CVE-2026-53533 via aiosmtplib (4.0.2)

aiosmtplib PYPI version 4.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on aiosmtplib and may be impacted: - alert-msgs 0.8.1 - arpakitlib =1.9.5, =1.5.4, =0.1.1, =1.0.0, =1.0.0, =1.0.0, =0.31.0, =0.31.0, =0.1.0, =0.31.0, =0.0.7, =0.38.0, =0.53.4 an...

actions-runtime (>=1.0.1, <=1.0.2), agience-origin (>=0.1.0, <=0.2.7) +20 more potentially affected by CVE-2026-53533 via aiosmtplib (3.0.2)

aiosmtplib PYPI version 3.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on aiosmtplib and may be impacted: - actions-runtime =1.0.1, =0.1.0, =1.0.0, =1.0.0, =0.1.0, =1.4.2, =1.7.0, =0.2.3, =1.6.52, =1.8.0rc2, =0.1.0, =0.1.2 and more Source cves:...

actions-runtime (>=1.0.1, <=1.0.2), agience-origin (>=0.1.0, <=0.2.7) +20 more potentially affected by CVE-2026-53533 via aiosmtplib (3.0.2)

aiosmtplib PYPI version 3.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on aiosmtplib and may be impacted: - actions-runtime =1.0.1, =0.1.0, =1.0.0, =1.0.0, =0.1.0, =1.4.2, =1.7.0, =0.2.3, =1.6.52, =1.8.0rc2, =0.1.0, =0.1.2 and more Source cves:...

async-sender (>=1.4.2, <=1.4.3) potentially affected by CVE-2026-53533 via aiosmtplib (1.1.3)

aiosmtplib PYPI version 1.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on aiosmtplib and may be impacted: - async-sender =1.4.2, =1.4.3 Source cves: CVE-2026-53533 Source advisory: OSV:GHSA-V3Q9-HJ7J-63HQ...

async-notify (>=0.5.17, <=0.6.3), async-sender (1.4.4) +8 more potentially affected by CVE-2026-53533 via aiosmtplib (1.1.6)

aiosmtplib PYPI version 1.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on aiosmtplib and may be impacted: - async-notify =0.5.17, =0.1.3, =0.2.3, =1.0.4, =2.0.11, =0.9.13.1, =0.8.4, =0.1.0a0, =0.1.6a0 Source cves: CVE-2026-53533 Source advisory:...

python311-aiosmtplib-5.1.1-1.1 on GA media (moderate)

python311-aiosmtplib-5.1.1-1.1 on GA media Announcement ID: openSUSE-SU-2026:11035-1 Rating: moderate Cross-References: CVE-2026-53533 CVSS scores: CVE-2026-53533 SUSE : 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N CVE-2026-53533 SUSE : 6.9...

SUSE CVE-2026-53533

aiosmtplib is an asynchronous SMTP client for use with asyncio. Prior to 5.1.1, SMTP.mail, SMTP.rcpt, SMTP.vrfy, and SMTP.expn send caller-supplied addresses without rejecting embedded CR or LF bytes. Data after the line break is framed as additional standalone SMTP command lines, allowing an...