CVE-2026-53533

Medium

Advisory

Published 7 Jul 2026In the index since 8 Sept 2026

aiosmtplib vulnerable to SMTP command injection via CR/LF in sender/recipient address

Carried by container images the latest versions of 2 of 17,781 indexed charts deploy, on 2 images.

Affected package	Affected versions	Fixed in	Images
aiosmtplibpypi	3.0.1, 5.1.0	5.1.1	2

2 by stars

Chart

Latest

Affected images

Radar Score

1 of the 7 container images this version deploys carry CVE-2026-53533.

Container image	Digest	Package	Fixed in
ghcr.io/cfi2017/opencve-scheduler :3.0.0	8d943799621b	aiosmtplib@3.0.1	5.1.1

15,371

1 of the 16 container images this version deploys carry CVE-2026-53533.

Container image	Digest	Package	Fixed in
ghcr.io/glassflow/glassflow-notifier :v1.0.3	d1b0ce10b513	aiosmtplib@5.1.0	5.1.1

12,056

2 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/cfi2017/opencve-scheduler :3.0.0	8d943799621b	aiosmtplib@3.0.1	5.1.1	1
ghcr.io/glassflow/glassflow-notifier :v1.0.3	d1b0ce10b513	aiosmtplib@5.1.0	5.1.1	1