lettre vulnerabilities (crates.io)

3 vulnerabilities.

• lettre crates.io lettre has TLS hostname verification disabled when using Boring TLS backend CVE-2026-46428 Fix available 9.1 CriticalMay 14, 2026
• lettre crates.io SMTP command injection in lettre CVE-2021-38189 Fix available 9.8 CriticalMay 22, 2021
• lettre crates.io Argument injection in lettre CVE-2020-28247 Fix available 5.3 MediumNovember 11, 2020