{"uuid": "baadb842-8db9-4e38-9838-c4cb2b1fde3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-90467", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117291417710627787", "content": "CVE-2026-90467 aiosmtplib before 5.1.3: ESMTP parameter injection via MAIL FROM/RCPT TO, forged auth and forced notifications. CVSS 4.0, no patch confirmed. Update to 5.1.3+ now. https://www.valtersit.com/cve/CVE-2026-90467/ #CVE #infosec #cybersecurity", "creation_timestamp": "2026-09-18T09:50:05.568058Z"}