CRITICAL9.1Go
GHSA-4g76-w3xw-2x6w· CVE-2023-27582, GO-2023-1630Full authentication bypass if SASL authorization username is specified
Modified: 9/10/2026
package
Go/github.com/foxcpp/maddy
pkg:go/github.com/foxcpp/maddy
HIGH8.2Go
GHSA-5835-4gvc-32pc· CVE-2026-40193, GO-2026-5137Maddy Mail Server has an LDAP Filter Injection via Unsanitized Username
Modified: 6/25/2026
HIGHGo
GHSA-5r5w-h76p-m726· CVE-2021-42583, GO-2022-0306Use of a Broken or Risky Cryptographic Algorithm in Max Mazurov Maddy
Modified: 8/21/2024
MEDIUM6.3Go
GHSA-6cp7-g972-w9m9· CVE-2022-24732Use of a Key Past its Expiration Date and Insufficient Session Expiration in Maddy Mail Server
Modified: 11/8/2023
HIGH7.5Go
GHSA-m6m5-pp4g-fcc8· GO-2022-0374S3 storage write is not aborted on errors leading to unbounded memory usage
Modified: 8/21/2024
LOW3.0Go
GHSA-qh54-9vc5-m9fg· GO-2022-0378MD5 hash support in github.com/foxcpp/maddy
Modified: 8/21/2024
—Go
GO-2022-0306· CVE-2021-42583, GHSA-5r5w-h76p-m726Use of a Broken or Risky Cryptographic Algorithm in Max Mazurov Maddy in github.com/foxcpp/maddy
Modified: 3/3/2026
—Go
GO-2022-0374· GHSA-m6m5-pp4g-fcc8S3 storage write is not aborted on errors leading to unbounded memory usage in github.com/foxcpp/maddy
Modified: 3/3/2026
—Go
GO-2022-0378· GHSA-qh54-9vc5-m9fgMD5 hash support in github.com/foxcpp/maddy
Modified: 3/3/2026
—Go
GO-2023-1630· CVE-2023-27582, GHSA-4g76-w3xw-2x6wFull authentication bypass if SASL authorization username is specified in github.com/foxcpp/maddy
Modified: 3/3/2026
—Go
GO-2026-5137· CVE-2026-40193, GHSA-5835-4gvc-32pcMaddy Mail Server has an LDAP Filter Injection via Unsanitized Username in github.com/foxcpp/maddy
Modified: 6/25/2026