Neomutt

Neomutt is a terminal-based email client built as a community fork of Mutt, maintaining a narrow but notably prominent footprint in the vulnerability landscape despite its single-product focus. Its vulnerability profile skews strongly toward critical-severity outcomes across a recurrent set of memory-safety and input-handling weaknesses, including out-of-bounds writes, improper input validation, path traversal, OS command injection, and cryptographic signature verification flaws that reflect the inherent risks of parsing untrusted email content and managing complex user interactions in a native codebase. The concentration of serious flaws in a mail client that processes arbitrary remote content underscores the attack surface presented by email as a delivery vector and the difficulty of safely handling diverse message formats, encodings, and attachments. Defenders should treat Neomutt advisories as high-priority, especially in environments where the client processes email from untrusted sources; current exploitation activity and exposure counts are shown alongside this summary.