stalwart vulnerabilities

3 known vulnerabilities in stalwart from Stalwartlabs. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  stalwart: URL Redirection to Untrusted Site

  CVE-2026-81036Aug 26, 2026Stalwartlabs

  Stalwart Mail Server does not compare an OAuth redirect target against any registered destination in its default configuration. The validation routine in crates/http/src/auth/oauth/registration.rs returns success immediately when the client-authentication requ

• 7.5 High severity

  stalwart: Uncontrolled Resource Consumption

  CVE-2025-61600Oct 2, 2025Stalwartlabs

  Stalwart is a mail and collaboration server. Versions 0.13.3 and below contain an unbounded memory allocation vulnerability in the IMAP protocol parser which allows remote attackers to exhaust server memory, potentially triggering the system's out-of-memory (O

• 7.1 High severity

  stalwart: Allocation of Resources Without Limits or Throttling

  CVE-2025-59045Sep 10, 2025Stalwartlabs

  Stalwart is a mail and collaboration server. Starting in version 0.12.0 and prior to version 0.13.3, a memory exhaustion vulnerability exists in Stalwart's CalDAV implementation that allows authenticated attackers to cause denial-of-service by triggering unbou