Vulnerability GHSA-v3q9-hj7j-63hq: Information

Description

aiosmtplib vulnerable to SMTP command injection via CR/LF in sender/recipient address

Severity: (6.9)

Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:H/SA:N

URL: https://github.com/advisories/GHSA-v3q9-hj7j-63hq

Published: July 8, 2026

Modified: July 8, 2026

Error type identifier: CWE-77, CWE-93

Package name	Branch	Fixed in version	Version from repository	Errata ID	Task #	State
python3-module-aiosmtplib	sisyphus	5.1.2-alt1	5.1.2-alt1	ALT-PU-2026-10505-2	424374	Fixed
python3-module-aiosmtplib	sisyphus_riscv64	5.1.2-alt1	5.1.2-alt1	ALT-PU-2026-10585-1	-	Fixed

Ecosystem	Name	Affected versions	Patched versions
PyPI	aiosmtplib	<5.1.1	5.1.1

Hyperlink	Resource
https://github.com/cole/aiosmtplib/security/advisories/GHSA-v3q9-hj7j-63hq	WEB
https://github.com/cole/aiosmtplib	PACKAGE
CVE-2026-53533	CVE

Version: v26.6.1