CVE catalog

CVE-2026-27851

Severity: High · CVSS 7.4CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Published: May 12, 2026, 1:28:43 PM UTC
Source: [NVD] · [CVE record]
EPSS: 0.41% · Oct 25, 2026

When safe filter is used with variable expansion, all following pipelines on the same string are incorrectly interpreted as safe too, enabling unsafe data to be unescaped. This can enable SQL / LDAP injection attacks when used in authentication. Avoid using safe filter until on fixed version. No publicly available exploits are known.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	dovecot	sid	`1:2.4.5+dfsg1-4`	fixed
Debian	dovecot	forky	`1:2.4.5+dfsg1-4`	fixed
Debian	dovecot	trixie	`1:2.4.1+dfsg1-6+deb13u6`	fixed
Debian	dovecot	trixie-security	`1:2.4.1+dfsg1-6+deb13u7`	fixed
Debian	dovecot	bookworm	`1:2.3.19.1+dfsg1-2.1+deb12u6`	not affected
Debian	dovecot	bookworm-security	`1:2.3.19.1+dfsg1-2.1+deb12u6`	not affected
Cpe	dovecot	Not reported	`1:2.3.21+dfsg1-2ubuntu6.5`	fixed
Cpe	dovecot-auth-lua	Not reported	`1:2.3.21+dfsg1-2ubuntu6.5`	fixed
Cpe	dovecot-core	Not reported	`1:2.3.21+dfsg1-2ubuntu6.5`	fixed
Cpe	dovecot-dev	Not reported	`1:2.3.21+dfsg1-2ubuntu6.5`	fixed
Cpe	dovecot-gssapi	Not reported	`1:2.3.21+dfsg1-2ubuntu6.5`	fixed
Cpe	dovecot-imapd	Not reported	`1:2.3.21+dfsg1-2ubuntu6.5`	fixed
Cpe	dovecot-ldap	Not reported	`1:2.3.21+dfsg1-2ubuntu6.5`	fixed
Cpe	dovecot-lmtpd	Not reported	`1:2.3.21+dfsg1-2ubuntu6.5`	fixed
Cpe	dovecot-managesieved	Not reported	`1:2.3.21+dfsg1-2ubuntu6.5`	fixed
Cpe	dovecot-mysql	Not reported	`1:2.3.21+dfsg1-2ubuntu6.5`	fixed
Cpe	dovecot-pgsql	Not reported	`1:2.3.21+dfsg1-2ubuntu6.5`	fixed
Cpe	dovecot-pop3d	Not reported	`1:2.3.21+dfsg1-2ubuntu6.5`	fixed
Cpe	dovecot-sieve	Not reported	`1:2.3.21+dfsg1-2ubuntu6.5`	fixed
Cpe	dovecot-solr	Not reported	`1:2.3.21+dfsg1-2ubuntu6.5`	fixed
Cpe	dovecot-sqlite	Not reported	`1:2.3.21+dfsg1-2ubuntu6.5`	fixed
Cpe	dovecot-submissiond	Not reported	`1:2.3.21+dfsg1-2ubuntu6.5`	fixed
Cpe	dovecot	Not reported	`2.4.4`	fixed
Cpe	dovecot	Not reported	`3.1.5`	fixed
Cpe	dovecot	Not reported	Not reported	not affected
Alpine	dovecot	3.23	`2.4.4-r0`	fixed
Alpine	dovecot	3.24	`2.4.4-r0`	fixed
Opensuse	dovecot24	leap 16.0	`2.4.4-160000.1.1`	fixed
Ubuntu	dovecot	25.10	`1:2.3.21.1+dfsg1-1ubuntu2`	vulnerable
Ubuntu	dovecot	25.10	`1:2.4.1+dfsg1-5ubuntu1`	vulnerable
Ubuntu	dovecot	25.10	`1:2.4.1+dfsg1-5ubuntu3`	vulnerable
Ubuntu	dovecot	25.10	`1:2.4.1+dfsg1-5ubuntu4`	vulnerable
Ubuntu	dovecot	25.10	`1:2.4.1+dfsg1-5ubuntu4.1`	vulnerable
Ubuntu	dovecot	25.10	`1:2.4.1+dfsg1-5ubuntu4.2`	fixed
Ubuntu	dovecot	26.04	`1:2.4.1+dfsg1-5ubuntu4`	vulnerable
Ubuntu	dovecot	26.04	`1:2.4.1+dfsg1-5ubuntu5`	vulnerable
Ubuntu	dovecot	26.04	`1:2.4.2+dfsg1-3ubuntu1`	vulnerable
Ubuntu	dovecot	26.04	`1:2.4.2+dfsg1-3ubuntu2`	vulnerable
Ubuntu	dovecot	26.04	`1:2.4.2+dfsg1-3ubuntu2.1`	fixed
Ubuntu	dovecot	22.04	`1:2.3.13+dfsg1-1ubuntu3`	vulnerable
Ubuntu	dovecot	22.04	`1:2.3.16+dfsg1-3ubuntu1`	vulnerable
Ubuntu	dovecot	22.04	`1:2.3.16+dfsg1-3ubuntu2`	vulnerable
Ubuntu	dovecot	22.04	`1:2.3.16+dfsg1-3ubuntu2.1`	vulnerable
Ubuntu	dovecot	22.04	`1:2.3.16+dfsg1-3ubuntu2.2`	vulnerable
Ubuntu	dovecot	22.04	`1:2.3.16+dfsg1-3ubuntu2.4`	vulnerable
Ubuntu	dovecot	22.04	`1:2.3.16+dfsg1-3ubuntu2.6`	vulnerable
Ubuntu	dovecot	22.04	`1:2.3.16+dfsg1-3ubuntu2.7`	vulnerable
Ubuntu	dovecot	22.04	`1:2.3.16+dfsg1-3ubuntu2.8`	vulnerable
Ubuntu	dovecot	22.04	`1:2.3.16+dfsg1-3ubuntu2.9`	fixed
Ubuntu	dovecot	24.04	`1:2.3.20+dfsg1-1ubuntu3`	vulnerable
Ubuntu	dovecot	24.04	`1:2.3.21+dfsg1-2ubuntu1`	vulnerable
Ubuntu	dovecot	24.04	`1:2.3.21+dfsg1-2ubuntu2`	vulnerable
Ubuntu	dovecot	24.04	`1:2.3.21+dfsg1-2ubuntu4`	vulnerable
Ubuntu	dovecot	24.04	`1:2.3.21+dfsg1-2ubuntu5`	vulnerable
Ubuntu	dovecot	24.04	`1:2.3.21+dfsg1-2ubuntu6`	vulnerable
Ubuntu	dovecot	24.04	`1:2.3.21+dfsg1-2ubuntu6.1`	vulnerable
Ubuntu	dovecot	24.04	`1:2.3.21+dfsg1-2ubuntu6.2`	vulnerable
Ubuntu	dovecot	24.04	`1:2.3.21+dfsg1-2ubuntu6.3`	vulnerable
Ubuntu	dovecot	24.04	`1:2.3.21+dfsg1-2ubuntu6.4`	vulnerable
Ubuntu	dovecot	24.04	`1:2.3.21+dfsg1-2ubuntu6.5`	fixed
Ubuntu	dovecot	25.10	`1:2.3.21.1+dfsg1-1ubuntu2`	vulnerable
Ubuntu	dovecot	25.10	`1:2.4.1+dfsg1-5ubuntu1`	vulnerable
Ubuntu	dovecot	25.10	`1:2.4.1+dfsg1-5ubuntu3`	vulnerable
Ubuntu	dovecot	25.10	`1:2.4.1+dfsg1-5ubuntu4`	vulnerable
Ubuntu	dovecot	25.10	`1:2.4.1+dfsg1-5ubuntu4.1`	vulnerable
Ubuntu	dovecot	25.10	`1:2.4.1+dfsg1-5ubuntu4.2`	fixed
Ubuntu	dovecot	26.04	`1:2.4.1+dfsg1-5ubuntu4`	vulnerable
Ubuntu	dovecot	26.04	`1:2.4.1+dfsg1-5ubuntu5`	vulnerable
Ubuntu	dovecot	26.04	`1:2.4.2+dfsg1-3ubuntu1`	vulnerable
Ubuntu	dovecot	26.04	`1:2.4.2+dfsg1-3ubuntu2`	vulnerable
Ubuntu	dovecot	26.04	`1:2.4.2+dfsg1-3ubuntu2.1`	fixed
Suse	dovecot24	linux enterprise server 16.0	`2.4.4-160000.1.1`	fixed
Suse	dovecot24	linux enterprise server for sap applications 16.0	`2.4.4-160000.1.1`	fixed
Opensuse	dovecot24	tumbleweed	`2.4.4-1.1`	fixed
Cpe	dovecot	Not reported	`3.1.5`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	dovecot	source	sid	`1:2.4.4+dfsg1-1`	not yet assigned	Not reported	[1136444]
Debian	dovecot	source	forky	`1:2.4.4+dfsg1-1`	not yet assigned	Not reported	[1136444]
Debian	dovecot	source	trixie	`1:2.4.1+dfsg1-6+deb13u6`	not yet assigned	Not reported	[1136444]
Debian	dovecot	source	bookworm	`Not affected`	unimportant	Not reported	[1136444]
Cpe	dovecot	cpe	Not reported	`1:2.3.21+dfsg1-2ubuntu6.5`	Not reported	Not reported	Not reported
Cpe	dovecot-auth-lua	cpe	Not reported	`1:2.3.21+dfsg1-2ubuntu6.5`	Not reported	Not reported	Not reported
Cpe	dovecot-core	cpe	Not reported	`1:2.3.21+dfsg1-2ubuntu6.5`	Not reported	Not reported	Not reported
Cpe	dovecot-dev	cpe	Not reported	`1:2.3.21+dfsg1-2ubuntu6.5`	Not reported	Not reported	Not reported
Cpe	dovecot-gssapi	cpe	Not reported	`1:2.3.21+dfsg1-2ubuntu6.5`	Not reported	Not reported	Not reported
Cpe	dovecot-imapd	cpe	Not reported	`1:2.3.21+dfsg1-2ubuntu6.5`	Not reported	Not reported	Not reported
Cpe	dovecot-ldap	cpe	Not reported	`1:2.3.21+dfsg1-2ubuntu6.5`	Not reported	Not reported	Not reported
Cpe	dovecot-lmtpd	cpe	Not reported	`1:2.3.21+dfsg1-2ubuntu6.5`	Not reported	Not reported	Not reported
Cpe	dovecot-managesieved	cpe	Not reported	`1:2.3.21+dfsg1-2ubuntu6.5`	Not reported	Not reported	Not reported
Cpe	dovecot-mysql	cpe	Not reported	`1:2.3.21+dfsg1-2ubuntu6.5`	Not reported	Not reported	Not reported
Cpe	dovecot-pgsql	cpe	Not reported	`1:2.3.21+dfsg1-2ubuntu6.5`	Not reported	Not reported	Not reported
Cpe	dovecot-pop3d	cpe	Not reported	`1:2.3.21+dfsg1-2ubuntu6.5`	Not reported	Not reported	Not reported
Cpe	dovecot-sieve	cpe	Not reported	`1:2.3.21+dfsg1-2ubuntu6.5`	Not reported	Not reported	Not reported
Cpe	dovecot-solr	cpe	Not reported	`1:2.3.21+dfsg1-2ubuntu6.5`	Not reported	Not reported	Not reported
Cpe	dovecot-sqlite	cpe	Not reported	`1:2.3.21+dfsg1-2ubuntu6.5`	Not reported	Not reported	Not reported
Cpe	dovecot-submissiond	cpe	Not reported	`1:2.3.21+dfsg1-2ubuntu6.5`	Not reported	Not reported	Not reported
Cpe	dovecot	cpe	Not reported	`2.4.4`	Not reported	Not reported	Not reported
Cpe	dovecot	cpe	Not reported	`3.1.5`	Not reported	Not reported	Not reported
Alpine	dovecot	apk	3.23	`2.4.4-r0`	Not reported	ALPINE-CVE-2026-27851	Not reported
Alpine	dovecot	apk	3.24	`2.4.4-r0`	Not reported	ALPINE-CVE-2026-27851	Not reported
Opensuse	dovecot24	rpm	leap 16.0	`2.4.4-160000.1.1`	Not reported	OPENSUSE-SU-2026:21109-1	Not reported
Ubuntu	dovecot	deb	25.10	`1:2.4.1+dfsg1-5ubuntu4.2`	Not reported	UBUNTU-CVE-2026-27851	Not reported
Ubuntu	dovecot	deb	26.04	`1:2.4.2+dfsg1-3ubuntu2.1`	Not reported	UBUNTU-CVE-2026-27851	Not reported
Ubuntu	dovecot	deb	22.04	`1:2.3.16+dfsg1-3ubuntu2.9`	Not reported	USN-8365-1	Not reported
Ubuntu	dovecot	deb	24.04	`1:2.3.21+dfsg1-2ubuntu6.5`	Not reported	USN-8365-1	Not reported
Ubuntu	dovecot	deb	25.10	`1:2.4.1+dfsg1-5ubuntu4.2`	Not reported	USN-8365-1	Not reported
Ubuntu	dovecot	deb	26.04	`1:2.4.2+dfsg1-3ubuntu2.1`	Not reported	USN-8365-1	Not reported
Suse	dovecot24	rpm	linux enterprise server 16.0	`2.4.4-160000.1.1`	Not reported	SUSE-SU-2026:22185-1	Not reported
Suse	dovecot24	rpm	linux enterprise server for sap applications 16.0	`2.4.4-160000.1.1`	Not reported	SUSE-SU-2026:22185-1	Not reported
Opensuse	dovecot24	rpm	tumbleweed	`2.4.4-1.1`	Not reported	OPENSUSE-SU-2026:10766-1	Not reported
Cpe	dovecot	cpe	Not reported	`3.1.5`	Not reported	NVD-CVE-2026-27851	Not reported

[Debian bug #1136444]

OpenFactory catalog packages

[openSUSE Tumbleweed]

[dovecot24-backend-mysql]Unknown
Source package: [dovecot24]
Details (1)
- 2.4.5-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 2.4.4-1.1
  Version impact unknown
  nvd · dovecot24 · opensuse · tumbleweed
[dovecot24-backend-pgsql]Unknown
Source package: [dovecot24]
Details (1)
- 2.4.5-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 2.4.4-1.1
  Version impact unknown
  nvd · dovecot24 · opensuse · tumbleweed
[dovecot24-backend-sqlite]Unknown
Source package: [dovecot24]
Details (1)
- 2.4.5-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 2.4.4-1.1
  Version impact unknown
  nvd · dovecot24 · opensuse · tumbleweed
[dovecot24-devel]Unknown
Source package: [dovecot24]
Details (1)
- 2.4.5-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 2.4.4-1.1
  Version impact unknown
  nvd · dovecot24 · opensuse · tumbleweed
[dovecot24-fts]Unknown
Source package: [dovecot24]
Details (1)
- 2.4.5-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 2.4.4-1.1
  Version impact unknown
  nvd · dovecot24 · opensuse · tumbleweed
[dovecot24-fts-flatcurve]Unknown
Source package: [dovecot24]
Details (1)
- 2.4.5-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 2.4.4-1.1
  Version impact unknown
  nvd · dovecot24 · opensuse · tumbleweed
[dovecot24-fts-solr]Unknown
Source package: [dovecot24]
Details (1)
- 2.4.5-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 2.4.4-1.1
  Version impact unknown
  nvd · dovecot24 · opensuse · tumbleweed

[Debian 12 (Bookworm)]

[dovecot-auth-lua]Not affected
Source package: [dovecot]
Details (6)
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security
  Not affected
  nvd · dovecot · debian · bookworm
[dovecot-core]Not affected
Source package: [dovecot]
Details (6)
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security
  Not affected
  nvd · dovecot · debian · bookworm
[dovecot-dev]Not affected
Source package: [dovecot]
Details (6)
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security
  Not affected
  nvd · dovecot · debian · bookworm
[dovecot-gssapi]Not affected
Source package: [dovecot]
Details (6)
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security
  Not affected
  nvd · dovecot · debian · bookworm
[dovecot-imapd]Not affected
Source package: [dovecot]
Details (6)
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security
  Not affected
  nvd · dovecot · debian · bookworm
[dovecot-ldap]Not affected
Source package: [dovecot]
Details (6)
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security
  Not affected
  nvd · dovecot · debian · bookworm
[dovecot-lmtpd]Not affected
Source package: [dovecot]
Details (6)
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security
  Not affected
  nvd · dovecot · debian · bookworm
[dovecot-lucene]Not affected
Source package: [dovecot]
Details (4)
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security
  Not affected
  nvd · dovecot · debian · bookworm
[dovecot-managesieved]Not affected
Source package: [dovecot]
Details (6)
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security
  Not affected
  nvd · dovecot · debian · bookworm
[dovecot-mysql]Not affected
Source package: [dovecot]
Details (6)
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security
  Not affected
  nvd · dovecot · debian · bookworm
[dovecot-pgsql]Not affected
Source package: [dovecot]
Details (6)
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security
  Not affected
  nvd · dovecot · debian · bookworm
[dovecot-pop3d]Not affected
Source package: [dovecot]
Details (6)
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security
  Not affected
  nvd · dovecot · debian · bookworm
[dovecot-sieve]Not affected
Source package: [dovecot]
Details (6)
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.21.1+dfsg1-1~bpo12+1 · amd64 · bookworm-backports
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.21.1+dfsg1-1~bpo12+1 · arm64 · bookworm-backports
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · amd64 · bookworm-security
  Not affected
  nvd · dovecot · debian · bookworm
- 1:2.3.19.1+dfsg1-2.1+deb12u6 · arm64 · bookworm-security
  Not affected
  nvd · dovecot · debian · bookworm

Next results

Observed: Oct 27, 2026, 7:35:08 AM UTC

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]