ALPINE-CVE-2025-15366
ALPINE-CVE-2025-15366
This page contains facts from public vulnerability sources. Check the original advisory before updating.
The imaplib module, when passed a user-controlled command, can have additional commands injected using newlines. Mitigation rejects commands containing control characters.
CVSS 5.9 · Medium · Fix available
- Published
- Updated
Stack: system
Affected products and versions
python3 Alpine:v3.24
- Affected ranges
- ECOSYSTEM: < 3.14.7-r0
Update to 3.14.7-r0