Alpine Project Alpine — known CVE vulnerabilities

Every CVE whose affected-product data names Alpine Project Alpine, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2020-14929 — CVSS 7.5 (high): Alpine before 2.23 silently proceeds to use an insecure connection after a /tls is sent in certain circumstances involving PREAUTH, which…
• CVE-2022-23553 — CVSS 7.5 (high): Alpine is a scaffolding library in Java. Alpine prior to version 1.10.4 allows URL access filter bypass. This issue has been fixed in…
• CVE-2022-23554 — CVSS 6.5 (medium): Alpine is a scaffolding library in Java. Alpine prior to version 1.10.4 allows Authentication Filter bypass. The AuthenticationFilter…
• CVE-2021-38370 — CVSS 5.9 (medium): In Alpine before 2.25, untagged responses from an IMAP server are accepted before STARTTLS.
• CVE-2021-46853 — CVSS 5.9 (medium): Alpine before 2.25 allows remote attackers to cause a denial of service (application crash) when LIST or LSUB is sent before STARTTLS.