CVE-2021-38189: SMTP command injection in lettre

Severity: Critical

CVSS Score: 9.8

An issue was discovered in the lettre crate before 0.9.6 for Rust. In an e-mail message body, an attacker can place a . character after two <CR><LF> sequences and then inject arbitrary SMTP commands.