Lettre vulnerabilities

Products

• Lettre 3

Newest

• lettre lettre has TLS hostname verification disabled when using Boring TLS backend CVE-2026-46428 Fix available 9.1 CriticalMay 14, 2026
• lettre SMTP command injection in lettre CVE-2021-38189 Fix available 9.8 CriticalMay 22, 2021
• lettre Argument injection in lettre CVE-2020-28247 Fix available 5.3 MediumNovember 11, 2020