Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2019-20790
9.8
CRITICALCVSS v3
Published
April 27, 2020
CVSS v2
6.8 MEDIUM
Affected
6 projects
Assigned by
MITRE
Severity scale
010
Description
OpenDMARC through 1.3.2 and 1.4.x, when used with pypolicyd-spf 2.0.2, allows attacks that bypass SPF and DMARC authentication in situations where the HELO field is inconsistent with the MAIL FROM field.
trusteddomainproject/OpenDMARC
GitHubThis is the Trusted Domain Project's impementation of the DMARC protocol libary and mail filter, called OpenDMARC. A "milter" connects to unix-based mailers (originally, sendmail, but now many) and provides a standard filtering API.
GitHubThis is the Trusted Domain Project's impementation of the DMARC protocol libary and mail filter, called OpenDMARC. A "milter" connects to unix-based mailers (originally, sendmail, but now many) and provides a standard filtering API.>= 1.3.0, <= 1.3.2, = 1.4.0NVD
Crates.io
Docker Hub
NPM
RubyGems