stalwart
v1.1.0All-in-one Mail & Collaboration server. Secure, scalable and fluent in every protocol (IMAP, JMAP, SMTP, CalDAV, CardDAV, WebDAV).
- Maintenance
- Active151 commits in 3 months · bus factor 1
- License
- Not detectedUnknown
- Security
- 5 advisories1 critical, 2 high, 2 medium · Scorecard 4.9/10
- Supported versions
- No scheduleendoflife.date does not track this project
15.9k stars · 1.1k forks · 43 open issues · last release 6 days ago · data checked 5 hours ago
Security advisories
All advisories on GitHubThe 5 most recent advisories published by the maintainers: 1 critical, 2 high, 2 medium. Check the patched version against the one you run.
- mediumCVE-2026-26312Feb 14, 2026Out-of-Memory Denial of Service via Malformed Nested MIME Messages
- Affected
- 0.15.4
- Patched in
- 0.15.5
- highCVE-2025-61600Sep 30, 2025Unbounded Memory Allocation in Stalwart IMAP server
- Affected
- < 0.13.4
- Patched in
- 0.13.4
- highCVE-2025-59045Sep 10, 2025Memory Exhaustion via CalDAV Event Expansion
- Affected
- < 0.13.3
- Patched in
- 0.13.3
- criticalCVE-2024-35187May 16, 2024Privilege escalation by design
- Affected
- <= 0.7.3
- Patched in
- 0.8.0
- mediumCVE-2024-35179May 15, 2024Unprivileged user can read files as root
- Affected
- <= 0.7.3
- Patched in
- 0.8.0