Stalwartlabs vulnerabilities
We track 4 vulnerabilities in Stalwartlabs products across 2 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on August 26, 2026.
Latest Stalwartlabs vulnerabilities
- 8.1 High severity
stalwart: URL Redirection to Untrusted Site
Stalwart Mail Server does not compare an OAuth redirect target against any registered destination in its default configuration. The validation routine in crates/http/src/auth/oauth/registration.rs returns success immediately when the client-authentication requ
- 7.5 High severity
stalwart: Uncontrolled Resource Consumption
Stalwart is a mail and collaboration server. Versions 0.13.3 and below contain an unbounded memory allocation vulnerability in the IMAP protocol parser which allows remote attackers to exhaust server memory, potentially triggering the system's out-of-memory (O
- 7.1 High severity
stalwart: Allocation of Resources Without Limits or Throttling
Stalwart is a mail and collaboration server. Starting in version 0.12.0 and prior to version 0.13.3, a memory exhaustion vulnerability exists in Stalwart's CalDAV implementation that allows authenticated attackers to cause denial-of-service by triggering unbou
- 9.1 Critical severity
mail-server: Incorrect Authorization
Stalwart Mail Server is an open-source mail server. Prior to version 0.8.0, attackers who achieved Arbitrary Code Execution as the stalwart-mail user (including web interface admins) can gain complete root access to the system. Usually, system services are run