| Package | Affected versions | Patched versions |
|---|---|---|
| mutt | < 1.10.1 | 1.10.1 |
| neomutt | < 20180716 | 20180716 |
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. pop.c does not forbid characters that may have unsafe interaction with message-cache pathnames, as demonstrated by a '/' character.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free