SMTP command injection in lettre

Impact Affected versions of lettre allowed SMTP command injection through an attacker's controlled message body. The module for escaping lines starting with a period wouldn't catch a period that was placed after a double CRLF sequence, allowing the attacker to end the current message and write...

abbegm (0.5.0), actix-jwt-session (>=0.1.0, <=0.1.1) +393 more potentially affected by CVE-2021-38191 via tokio (>=0.3.7, <=1.5.0)

tokio CARGO version =0.3.7, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.2.0, =0.6.0, =0.1.0, =0.3.6, =0.3.15 and more Source cves: CVE-2021-38191 Source advisory: OSV:RUSTSEC-2021-0072...

a-bot (0.0.1), a-gpt (>=0.1.0, <=0.4.0) +24303 more potentially affected by unknown CVE via atty (>=0.1.2, <=0.2.14)

atty CARGO version =0.1.2, =0.1.0, =0.0.5, =0.2.0, =0.0.1, =0.0.2, =0.4.1, =0.9.0, =0.1.0, =0.2.1, =1.0.3, =0.1.0, =0.1.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2021-0145...

abbegm (>=0.1.0, <=0.5.0), acacia (0.2.0) +561 more potentially affected by CVE-2021-38190 via nalgebra (>=0.11.2, <=0.26.2)

nalgebra CARGO version =0.11.2, =0.1.0, =0.1.0, =0.2.0, =0.1.0, =0.11.0, =0.2.0, =0.1.0, =0.3.0 - amethyst-navigation 0.1.0 and more Source cves: CVE-2021-38190 Source advisory: OSV:RUSTSEC-2021-0070...

about-filter (0.1.0), acari-lib (>=0.1.11, <=0.1.12) +467 more potentially affected by unknown CVE via twoway (>=0.1.8, <=0.2.2)

twoway CARGO version =0.1.8, =0.1.11, =0.1.0, =0.9.2, =0.1.0, =0.4.0-beta.1, =0.1.0-beta.1, =0.1.0, =0.0.1, =0.1.0, =0.1.0, =0.1.8, =0.1.18 - akibisuto-stylus 0.1.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2021-0146...

actix-broker (>=0.1.3, <=0.1.7), actix-diesel (>=0.1.0, <=0.3.0) +894 more potentially affected by unknown CVE via cpuid-bool (>=0.1.2, <=0.2.0)

cpuid-bool CARGO version =0.1.2, =0.1.3, =0.1.0, =0.3.0, =0.3.0-alpha.1, =0.5.1, =0.0.2, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.2 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2021-0064...

actinium226-librespot (0.4.3), actinium226-librespot-connect (0.4.3) +926 more potentially affected by unknown CVE via aesni (>=0.9.0, <=0.10.0)

aesni CARGO version =0.9.0, =0.4.3-updated, =0.1.3, =0.1.0, =0.3.0, =0.3.0-alpha.1, =0.5.1, =0.0.2, =0.1.0, =0.1.0, =0.2.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2021-0059...

actinium226-librespot (0.4.3), actinium226-librespot-connect (0.4.3) +51 more potentially affected by unknown CVE via aes-ctr (>=0.6.0, <=0.99.99)

aes-ctr CARGO version =0.6.0, =0.4.3-updated, =0.5.0, =0.1.0, =0.2.0, =0.1.0, =0.40.0, =0.40.0, =0.40.0, =0.40.0, =0.1.0, =0.1.0, =0.6.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2021-0061...

actinium226-librespot (0.4.3), actinium226-librespot-connect (0.4.3) +941 more potentially affected by unknown CVE via aes-soft (0.6.4)

aes-soft CARGO version 0.6.4 is affected by a known vulnerability. The following packages have a transitive dependency on aes-soft and may be impacted: - actinium226-librespot 0.4.3 - actinium226-librespot-connect 0.4.3 - actinium226-librespot-playback =0.4.3-updated, =0.1.3, =0.1.0, =0.3.0,...

SUSE-SU-2021:1408-1 Security update for librsvg

This update for librsvg fixes the following issues: - librsvg was updated to 2.46.5: Update dependent crates that had security vulnerabilities: smallvec to 0.6.14 - RUSTSEC-2018-0003 - CVE-2021-25900 bsc1183403...

SUSE SLED15 / SLES15 Security Update : librsvg (SUSE-SU-2021:1310-1)

This update for librsvg fixes the following issues : librsvg was updated to 2.42.9 : - Update dependent crates that had security vulnerabilities: smallvec to 0.6.14 - RUSTSEC-2018-0003 - CVE-2018-20991 bsc1148293 -the bundled version of the cssparser crate now builds correctly on Rust 1.43...

cobalt-bin (>=0.15.1, <=0.17.5), hyper-static-server (>=0.1.1, <=0.5.1) +10 more potentially affected by unknown CVE via sass-rs (0.2.2)

sass-rs CARGO version 0.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on sass-rs and may be impacted: - cobalt-bin =0.15.1, =0.1.1, =0.1.6, =0.1.0, =0.1.0, =0.1.2, =0.1.1-alpha1, =0.7.0, =0.1.0, =0.1.2, =0.1.8 Source cves: unknown CVE Source advisor...

actix_web_metrics_mw (>=0.0.1, <=0.3.1), capsule (>=0.1.1, <=0.1.5) +32 more potentially affected by CVE-2021-45704 via metrics-util (>=0.1.0, <=0.6.2)

metrics-util CARGO version =0.1.0, =0.0.1, =0.1.1, =0.37.0-pre, =0.2.0, =0.9.0, =0.1.0, =0.5.0, =0.9.1, =0.1.0-alpha.1, =0.1.0-alpha.1, =0.1.0, =0.1.1 and more Source cves: CVE-2021-45704 Source advisory: OSV:RUSTSEC-2021-0113...

a2d (>=0.1.0, <=0.1.11), aart (>=0.1.0, <=0.1.1) +1017 more potentially affected by unknown CVE via rusttype (>=0.1.2, <=0.9.3)

rusttype CARGO version =0.1.2, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.1.1, =0.1.1, =0.1.0, =0.4.0, =0.3.0, =0.1.0, =0.2.0, =0.0.10, =0.9.0, =0.1.0, =0.1.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2021-0140...

diesel_cli (>=1.0.1, <=1.3.1), diesel_derives (>=1.0.0-rc1, <=1.2.0) +10 more potentially affected by CVE-2021-28305 via diesel (>=1.0.0-beta1, <=1.3.3)

diesel CARGO version =1.0.0-beta1, =1.0.1, =1.0.0-rc1, =1.0.0-beta1, =1.0.1, =1.0.1, =0.1.0, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.0-beta1, =1.0.0-rc1 Source cves: CVE-2021-28305 Source advisory: OSV:RUSTSEC-2021-0037...

atomic-server (>=0.10.0, <=0.17.0), basic-http-server (>=0.6.0, <=0.8.1) +40 more potentially affected by CVE-2021-27671 via comrak (>=0.1.9, <=0.8.2)

comrak CARGO version =0.1.9, =0.10.0, =0.6.0, =0.1.0, =0.1.5, =0.1.0, =0.0.1, =0.15.0, =0.1.0, =0.1.0, =0.1.1, =0.1.0, =0.1.0, =0.1.0, =0.1.7 and more Source cves: CVE-2021-27671 Source advisory: OSV:RUSTSEC-2021-0026...

axosnake (>=0.1.0, <=0.1.4), bevy_rapier2d (>=0.1.1, <=0.4.0) +22 more potentially affected by unknown CVE via ncollide2d (>=0.15.4, <=0.33.0)

ncollide2d CARGO version =0.15.4, =0.1.0, =0.1.1, =0.0.0, =0.18.0, =0.0.1, =0.1.0, =0.15.3, =0.8.0, =0.4.0, =0.5.0, =0.5.0, =0.5.0, =0.46.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2021-0151...

basic_dsp (>=0.4.0, <=0.8.2) potentially affected by CVE-2021-25906 via basic_dsp_matrix (>=0.4.3, <=0.8.1)

basicdspmatrix CARGO version =0.4.3, =0.4.0, =0.8.2 Source cves: CVE-2021-25906 Source advisory: OSV:RUSTSEC-2021-0009...

financ (>=0.1.0, <=0.3.0), fitparser (>=0.1.0, <=0.5.1) +16 more potentially affected by CVE-2021-26951 via calamine (>=0.11.8, <=0.16.2)

calamine CARGO version =0.11.8, =0.1.0, =0.1.0, =1.0.0, =0.2.0, =0.15.0, =0.11.0, =0.21.0, =0.16.0, =0.1.0, =0.1.0, =0.1.0, =1.0.0, =1.0.1 and more Source cves: CVE-2021-26951 Source advisory: OSV:RUSTSEC-2021-0015...

mdbook-cat-prep (>=1.0.0, <=1.0.8), mdbook-curly-quotes (0.3.0) +24 more potentially affected by CVE-2020-26297 via mdbook (>=0.2.3, <=0.3.7)

mdbook CARGO version =0.2.3, =1.0.0, =0.4.0, =0.0.1, =0.1.0, =0.1.0, =0.2.3, =0.2.0, =1.0.0, =0.1.0, =0.1.0, =0.1.1 and more Source cves: CVE-2020-26297 Source advisory: OSV:RUSTSEC-2021-0001...