CLEANSTART-2026-DL97476 aiosmtplib is an asynchronous SMTP client for use with asyncio

Security vulnerability affects the airflow-3 package. aiosmtplib is an asynchronous SMTP client for use with asyncio...

CLEANSTART-2026-FC13167 aiosmtplib before 5

CVE-2026-90467 affects multiple packages. aiosmtplib before 5. See references for individual vulnerability details...

CLEANSTART-2026-DR99316 aiosmtplib is an asynchronous SMTP client for use with asyncio

Security vulnerability affects the airflow-3 package. aiosmtplib is an asynchronous SMTP client for use with asyncio...

PT-2026-105221

Security vulnerability affects the airflow-3 package. aiosmtplib is an asynchronous SMTP client for use with asyncio...

python313-aiosmtplib-5.1.3-1.1 on GA media (moderate)

python313-aiosmtplib-5.1.3-1.1 on GA media Announcement ID: openSUSE-SU-2026:11799-1 Rating: moderate Cross-References: CVE-2026-90467 CVSS scores: CVE-2026-90467 SUSE : 4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N CVE-2026-90467 SUSE : 6.3...

OPENSUSE-SU-2026:11799-1 python313-aiosmtplib-5.1.3-1.1 on GA media

These are all security issues fixed in the python313-aiosmtplib-5.1.3-1.1 package on the GA media of openSUSE Tumbleweed...

SUSE CVE-2026-90467

aiosmtplib before 5.1.3 fails to properly validate email addresses supplied by callers, allowing attackers to inject ESMTP parameters into MAIL FROM and RCPT TO command lines. Attackers can craft malicious addresses containing spaces and angle brackets to append parameters like AUTH, NOTIFY, or...

Arbitrary Argument Injection

Overview aiosmtplib is an aiosmtplib is an asynchronous SMTP client for use with asyncio. Affected versions of this package are vulnerable to Arbitrary Argument Injection in the parseaddress function of src/aiosmtplib/email.py, which returns parsedaddress or address.strip, so a malformed mailbox...

gulp-dissect (>=1.0.1, <=1.0.3), hagworm (>=5.11.0, <=5.11.4) +2 more potentially affected by CVE-2026-90467 via aiosmtplib (>=5.0.0, <=5.1.2)

aiosmtplib PYPI version =5.0.0, =1.0.1, =5.11.0, =2.0.0, =1.7.14, =1.7.605 Source cves: CVE-2026-90467 Source advisory: SNYK:PYTHON-AIOSMTPLIB-19784401...

DEBIAN-CVE-2026-90467

aiosmtplib before 5.1.3 fails to properly validate email addresses supplied by callers, allowing attackers to inject ESMTP parameters into MAIL FROM and RCPT TO command lines. Attackers can craft malicious addresses containing spaces and angle brackets to append parameters like AUTH, NOTIFY, or...

CVE-2026-90467

aiosmtplib before 5.1.3 fails to properly validate email addresses supplied by callers, allowing attackers to inject ESMTP parameters into MAIL FROM and RCPT TO command lines. Attackers can craft malicious addresses containing spaces and angle brackets to append parameters like AUTH, NOTIFY, or...

CVE-2026-90467

aiosmtplib before 5.1.3 fails to properly validate email addresses supplied by callers, allowing attackers to inject ESMTP parameters into MAIL FROM and RCPT TO command lines. Attackers can craft malicious addresses containing spaces and angle brackets to append parameters like AUTH, NOTIFY, or...

UBUNTU-CVE-2026-90467

aiosmtplib before 5.1.3 fails to properly validate email addresses supplied by callers, allowing attackers to inject ESMTP parameters into MAIL FROM and RCPT TO command lines. Attackers can craft malicious addresses containing spaces and angle brackets to append parameters like AUTH, NOTIFY, or...

CVE-2026-90467

aiosmtplib before 5.1.3 fails to properly validate email addresses supplied by callers, enabling ESMTP parameter injection into MAIL FROM and RCPT TO envelope commands. Attackers can craft malicious addresses containing spaces and angle brackets to append parameters such as AUTH , NOTIFY , or ORC...

CVE-2026-90467

aiosmtplib before 5.1.3 fails to properly validate email addresses supplied by callers, allowing attackers to inject ESMTP parameters into MAIL FROM and RCPT TO command lines. Attackers can craft malicious addresses containing spaces and angle brackets to append parameters like AUTH, NOTIFY, or...

CVE-2026-90467 aiosmtplib before 5.1.3 ESMTP Parameter Injection via unvalidated addresses

aiosmtplib before 5.1.3 fails to properly validate email addresses supplied by callers, allowing attackers to inject ESMTP parameters into MAIL FROM and RCPT TO command lines. Attackers can craft malicious addresses containing spaces and angle brackets to append parameters like AUTH, NOTIFY, or...

CVE-2026-90467 aiosmtplib before 5.1.3 ESMTP Parameter Injection via unvalidated addresses

aiosmtplib before 5.1.3 fails to properly validate email addresses supplied by callers, allowing attackers to inject ESMTP parameters into MAIL FROM and RCPT TO command lines. Attackers can craft malicious addresses containing spaces and angle brackets to append parameters like AUTH, NOTIFY, or...

EUVD-2026-76774

aiosmtplib before 5.1.3 fails to properly validate email addresses supplied by callers, allowing attackers to inject ESMTP parameters into MAIL FROM and RCPT TO command lines. Attackers can craft malicious addresses containing spaces and angle brackets to append parameters like AUTH, NOTIFY, or...

CVE-2026-90467 aiosmtplib before 5.1.3 ESMTP Parameter Injection via unvalidated addresses

aiosmtplib before 5.1.3 fails to properly validate email addresses supplied by callers, allowing attackers to inject ESMTP parameters into MAIL FROM and RCPT TO command lines. Attackers can craft malicious addresses containing spaces and angle brackets to append parameters like AUTH, NOTIFY, or...

actions-runtime (>=1.0.1, <=1.0.4), agience-origin (>=0.1.0, <=0.2.8) +94 more potentially affected by CVE-2026-90467 via aiosmtplib (>=1.0.3, <=5.1.2)

aiosmtplib PYPI version =1.0.3, =1.0.1, =0.1.0, =1.0.0, =1.0.0, =0.1.0, =1.9.5, =3.0.0, =0.5.17, =1.3.0, =0.0.3, =0.39.0, =0.1.24, =0.1.52 - backend-ai-manager 25.6.0rc4 and more Source cves: CVE-2026-90467 Source advisory: MEND:CVE-2026-90467...