CRITICALcrates.io
GHSA-4pj9-g833-qx53· CVE-2026-46428, RUSTSEC-2026-0141lettre has TLS hostname verification disabled when using Boring TLS backend
Modified: 7/28/2026
package
pkg:crates.io/lettre
lettre has TLS hostname verification disabled when using Boring TLS backend
Modified: 7/28/2026
SMTP command injection in lettre
Modified: 11/8/2023
Argument injection in lettre
Modified: 11/8/2023
Argument injection in sendmail transport
Modified: 11/8/2023
SMTP command injection in body
Modified: 11/8/2023
TLS hostname verification disabled when using Boring TLS backend
Modified: 7/29/2026