All products

github.com/foxcpp/maddy

Go · Package
6 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Full authentication bypass if SASL authorization username is specifiedCVE-2023-27582 · GHSA-4G76-W3XW-2X6WVersion ranges need review. github.com/foxcpp/maddy Go Critical Fix reported
Maddy Mail Server has an LDAP Filter Injection via Unsanitized UsernameCVE-2026-40193 · GHSA-5835-4GVC-32PCVersion ranges need review. github.com/foxcpp/maddy Go High Fix reported
Use of a Broken or Risky Cryptographic Algorithm in Max Mazurov MaddyCVE-2021-42583 · GHSA-5R5W-H76P-M726Version ranges need review. github.com/foxcpp/maddy Go High Fix reported
MD5 hash support in github.com/foxcpp/maddyGHSA-QH54-9VC5-M9FG · GO-2022-0378Version ranges need review. github.com/foxcpp/maddy Go Low Fix reported
S3 storage write is not aborted on errors leading to unbounded memory usageGHSA-M6M5-PP4G-FCC8 · GO-2022-0374Version ranges need review. github.com/foxcpp/maddy Go High Fix reported
Use of a Key Past its Expiration Date and Insufficient Session Expiration in Maddy Mail ServerCVE-2022-24732 · GHSA-6CP7-G972-W9M9 github.com/foxcpp/maddy Go Medium Fix reported