Rust advisories / crate
Security history · lettre · data from Oct 24, 2026
Is lettre safe to use? Its security history
VerdictNo open advisories. 3 past vulnerabilities were fixed; use 0.11.22 or newer to be clear of all of them.
3advisories on record
3vulnerabilities
0unmaintained notices
0.11.22newest fixed version
Every advisory, newest first
- VulnerabilityRUSTSEC-2026-0141 · 2026-05-14TLS hostname verification disabled when using Boring TLS backend
- VulnerabilityRUSTSEC-2021-0069 · 2021-05-22SMTP command injection in body
- Vulnerability MediumRUSTSEC-2020-0069 · 2020-11-11Argument injection in sendmail transport
Check your version
Run cargo tree -i lettre to see which version you build and why, or paste your Cargo.lock into the Cargo.toml checker to match every advisory against your exact versions.
RustSec advisories (CC0-1.0) and GitHub-reviewed advisories via OSV's crates.io export, downloaded Oct 24, 2026.
Up next
Are you affected?Check your whole dependency treeRead it next →Also worth your time
Did this answer your question?