MailCore / mailcore2

MailCore 2 provide a simple and asynchronous API to work with e-mail protocols IMAP, POP and SMTP. The API has been redesigned from ground up.
Other
2.6k stars 624 forks source link

Please include CVE-2021-26911 fix in an "official" release/tag #1985

Open WhyWake opened 1 year ago

WhyWake commented 1 year ago

Hello, First off, thanks for working on the mailcore2 library, and making it available for everyone to use!

I see mailcore2 previously had vulnerability CVE-2021-26911, which has since been fixed: https://github.com/MailCore/mailcore2/issues/1903. However, this is not yet part of any official release from mailcore2. The latest release 0.6.4 was before this fix, so doesn't contain it.

Could you please push out a release that does contain this fix?

We can of course download the current code from master, but this is non-ideal from a version-tracking point of view. i.e., master changes with time, and we cannot authoritatively know which version of the library we are using.

Thanks -Vivek