jstedfast

Products

ProductCVEsExploitedLatest
MailKit1–Apr 24, 2026
MimeKit1–Mar 6, 2026

Exploited and recent CVEs

  • CVE-2026-41319 Medium 6.5 MailKit has STARTTLS Response Injection via unflushed stream buffer that enables SASL mechanism downgrade 0.2%
  • CVE-2026-30227 Medium 6.9 MimeKit: CRLF Injection in Quoted Local-Part Enables SMTP Command Injection and Email Forgery 1.2%