DO
Product
Dovecot
69
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 20Medium 23Low 1
Watch
Add Dovecot to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-11500 | 9.8 | Aug 29 | In Dovecot before 2.2.36.4 and 2.3.x before 2.3.7.2 (and Pigeonhole before 0.5.7.2), protocol processing can fail for quoted strings Affected: before 2.2.36.4; 2.3.0 before 2.3.7.2 |
| CVE-2026-27851 | 9.1 | May 12 | When safe filter is used with variable expansion, all following pipelines on the same string are incorrectly interpreted as safe too, enabling unsafe data to be unescaped Affected: before 2.4.4 |
Showing 2