How many CVEs have a located fix in muttmua/mutt?

26 published CVEs have a fix traced to functions in muttmua/mutt, touching 33 functions across 20 files.

Which function in muttmua/mutt has been patched by the most CVEs?

imap_auth_gss in imap/auth_gss.c has been changed by 2 CVE fixes, from 2018 to 2026.

How large is a typical CVE fix in muttmua/mutt?

The median fix changes 7 lines. 85% of fixes change 20 lines or fewer, and 73% change a single function.

How is a fix located to a function?

The upstream fix commit for each CVE is fetched and its diff is split into hunks. Each hunk is attributed to the function, method or type it changes, using the definition the diff itself names. Backports of the same fix to stable branches are counted once.

RadicalNotion.AI

Log in Create an account

c

#191 of 500 repositories

muttmua/mutt

Name: muttmua/mutt: functions patched by CVE fixes
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

Functions and files changed by CVE fixes in this repository.

Latest located fix May 4, 2026

26

CVE fixes located

Published CVEs

33

Functions patched

Distinct function sites

20

Files patched

Distinct source files

2018–2026

Years covered

By CVE publication date

Overview

26 published CVEs have a fix traced to functions in muttmua/mutt, the earliest published in 2018. Those fixes changed 33 distinct functions across 20 files, in 76 patch hunks.

Among the 500 repositories tracked here, muttmua/mutt ranks #191 by the number of CVEs with a located fix.

Most patched functions

Functions in muttmua/mutt changed by the most CVE fixes.

Most patched files

Files in muttmua/mutt changed by the most CVE fixes.

1imap/util.c6 CVEs · 4 functions
2imap/command.c4 CVEs · 3 functions
3imap/imap.c4 CVEs · 2 functions
4imap/auth_cram.c3 CVEs · 2 functions
5pop.c2 CVEs · 6 functions
6sendlib.c2 CVEs · 3 functions
7crypt-gpgme.c2 CVEs · 2 functions
8imap/auth_gss.c2 CVEs · 1 functions
9imap/message.c2 CVEs · 1 functions
10rfc2047.c2 CVEs · 1 functions

Fix size

How much code a CVE fix in muttmua/mutt changes, with backports counted once.

7

Median lines changed

Added plus removed, per CVE

85%

Fixes of 20 lines or fewer

Share of CVE fixes

73%

Fixes in a single function

Share of CVE fixes

Latest CVEs

The most recently published CVEs with a fix located in muttmua/mutt, and the functions each fix changed.

CVE-2026-43864
CVE-2026-43864show_sig_summary
Low · CVSS 2.5
EPSS 0.1%2026-05-04
CVE-2026-43863
CVE-2026-43863data_object_to_stream
Low · CVSS 3.7
EPSS 0.3%2026-05-04
CVE-2026-43862
CVE-2026-43862imap_auth_gss
Low · CVSS 3.7
EPSS 0.3%2026-05-04
CVE-2026-43861
CVE-2026-43861url_pct_decode
Low · CVSS 3.7
EPSS 0.3%2026-05-04
CVE-2026-43860
CVE-2026-43860hmac_md5
Low · CVSS 3.7
EPSS 0.3%2026-05-04
CVE-2026-43859
CVE-2026-43859hmac_md5
Low · CVSS 3.7
EPSS 0.3%2026-05-04
CVE-2023-4874
CVE-2023-4874rfc2047_decode_word write_one_header
Medium · CVSS 6.5
EPSS 0.8%2023-09-09
CVE-2023-4875
CVE-2023-4875encode_headers mutt_write_rfc822_header rfc2047_decode_word
Medium · CVSS 5.7
EPSS 0.6%2023-09-09
CVE-2022-1328
CVE-2022-1328mutt_decode_uuencoded
Medium · CVSS 5.3
EPSS 1.7%2022-04-14
CVE-2021-32055
CVE-2021-32055mutt_seqset_iterator_next
Critical · CVSS 9.1
EPSS 2.6%2021-05-05
CVE-2021-3181
CVE-2021-3181rfc822_parse_adrlist
Medium · CVSS 6.5
EPSS 2.8%2021-01-19
CVE-2020-28896
CVE-2020-28896imap_open_connection
Medium · CVSS 5.3
EPSS 2.4%2020-11-23

Get an alert for each new muttmua/mutt CVE, with the patched functions and AI-written analysis.

Monitor mutt CVEs

Other repositories

Repositories with a similar number of located CVE fixes.

baptisteArno/typebot.io26 CVEs danny-avila/librechat26 CVEs firefly-iii/firefly-iii26 CVEs getkirby/kirby26 CVEs LibVNC/libvncserver26 CVEs mdadams/jasper26 CVEs moby/moby26 CVEs osTicket/osTicket26 CVEs

Browse all repositories

Frequently asked questions

Common questions about CVE fixes in muttmua/mutt.

How many CVEs have a located fix in muttmua/mutt?: 26 published CVEs have a fix traced to functions in muttmua/mutt, touching 33 functions across 20 files.
Which function in muttmua/mutt has been patched by the most CVEs?: imap_auth_gss in imap/auth_gss.c has been changed by 2 CVE fixes, from 2018 to 2026.
How large is a typical CVE fix in muttmua/mutt?: The median fix changes 7 lines. 85% of fixes change 20 lines or fewer, and 73% change a single function.
How is a fix located to a function?: The upstream fix commit for each CVE is fetched and its diff is split into hunks. Each hunk is attributed to the function, method or type it changes, using the definition the diff itself names. Backports of the same fix to stable branches are counted once.

References

Fix locations are computed by RadicalNotion.AI from the upstream patch diff of each CVE. CVE data is sourced from the CVE Program.

Track muttmua/mutt CVEs

Get an alert when a new CVE lands in this repository, with the patched functions and AI-written remediation guidance.

Create an account See pricing