Canarymail Canary Mail
2 CVEs affecting Canarymail Canary Mail. Latest disclosed: 2025-12-16. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-65318 | Critical | 9.1 | 2025-12-16 | When using the attachment interaction functionality, Canary Mail 5.1.40 and below saves documents to a file system without a Mark-of-the-Web tag, which allows… |
CVE-2021-26911 | High | 7.4 | 2021-02-17 | core/imap/MCIMAPSession.cpp in Canary Mail before 3.22 has Missing SSL Certificate Validation for IMAP in STARTTLS mode. |