Threats tagged 'ghsa-qh75-x5jv-g7wg'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.3	EPSS 0.4%	CVE-2026-90467cole aiosmtplib · Argument Injection Medium6.3EPSS 0.4%2026-09-12CVE Database V5CVE-2026-90467 CVE-2026-90467 is a vulnerability in aiosmtplib before version 5.1.3 where improper validation of email addresses allows attackers to inject ESMTP parameters into MAIL FROM and RCPT TO commands. This can enable attackers to forge authenticated identities or manipulate delivery notifications by appending parameters such as AUTH, NOTIFY, or ORCPT. The vulnerability has a medium severity with a CVSS score of 6.3. EPSS 0.4%Vulnerability #ghsa-qh75-x5jv-g7wg	CVE Database V5	2026-09-12

Page 1 of 1