GO-2026-5137 Maddy Mail Server has an LDAP Filter Injection via Unsanitized Username in github.com/foxcpp/maddy

Maddy Mail Server has an LDAP Filter Injection via Unsanitized Username in github.com/foxcpp/maddy...

GO-2022-0378 MD5 hash support in github.com/foxcpp/maddy

MD5 hash support in github.com/foxcpp/maddy...

GO-2022-0374 S3 storage write is not aborted on errors leading to unbounded memory usage in github.com/foxcpp/maddy

S3 storage write is not aborted on errors leading to unbounded memory usage in github.com/foxcpp/maddy...

Information Disclosure

github.com/foxcpp/maddy is vulnerable to information disclosure. The vulnerability exists in verify.go of auth.shadow module due to the presence of MD5 hashes which allows an attacker to gain access to sensitive information...