Skip to content

fix(deps): bump aiosmtplib from 5.1.0 to 5.1.1 - #21

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/aiosmtplib-5.1.1
Closed

fix(deps): bump aiosmtplib from 5.1.0 to 5.1.1#21
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/aiosmtplib-5.1.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 1, 2026

Copy link
Copy Markdown
Contributor

Bumps aiosmtplib from 5.1.0 to 5.1.1.

Release notes

Sourced from aiosmtplib's releases.

5.1.1

What's Changed

  • Security: Reject control characters (the C0 range 0x00-0x1F and DEL 0x7F, including CR, LF, and NUL) in SMTP command arguments, preventing command injection via input passed to mail(), rcpt(), vrfy(), expn() or sendmail(). Such input now raises ValueError before anything is written to the connection. More details: GHSA-v3q9-hj7j-63hq Thanks to @​tonghuaroot for the report.
  • Bugfix: SMTP.quit() no longer hangs until the read timeout when the peer drops the transport with an exception after QUIT is sent but before the 221 reply is parsed (e.g. AWS SES closing TLS without close_notify). Contributed by @​yamaaaaaa31

New Contributors

Full Changelog: cole/aiosmtplib@v5.1.0...v5.1.1

Changelog

Sourced from aiosmtplib's changelog.

5.1.1

  • Security: Reject control characters (the C0 range 0x00-0x1F and DEL 0x7F, including CR, LF, and NUL) in SMTP command arguments, preventing command injection via input passed to mail(), rcpt(), vrfy(), expn() or sendmail(). Such input now raises ValueError before anything is written to the connection. More details: GHSA-v3q9-hj7j-63hq Thanks to @​tonghuaroot for the report.
  • Bugfix: SMTP.quit() no longer hangs until the read timeout when the peer drops the transport with an exception after QUIT is sent but before the 221 reply is parsed (e.g. AWS SES closing TLS without close_notify).
Commits

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Jun 1, 2026
Bumps [aiosmtplib](https://github.com/cole/aiosmtplib) from 5.1.0 to 5.1.1.
- [Release notes](https://github.com/cole/aiosmtplib/releases)
- [Changelog](https://github.com/cole/aiosmtplib/blob/main/CHANGELOG.rst)
- [Commits](cole/aiosmtplib@v5.1.0...v5.1.1)

---
updated-dependencies:
- dependency-name: aiosmtplib
  dependency-version: 5.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/uv/aiosmtplib-5.1.1 branch from 7365639 to 1311104 Compare June 10, 2026 12:20
@CaseyRo
CaseyRo force-pushed the dependabot/uv/aiosmtplib-5.1.1 branch from 1311104 to 90f3a96 Compare June 30, 2026 12:31
@dependabot @github

dependabot Bot commented on behalf of github Jul 6, 2026

Copy link
Copy Markdown
Contributor Author

Superseded by #35.

@dependabot dependabot Bot closed this Jul 6, 2026
@dependabot
dependabot Bot deleted the dependabot/uv/aiosmtplib-5.1.1 branch July 6, 2026 04:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants