In Alpine before 2.25, untagged responses from an IMAP server are accepted before STARTTLS.Referenceshttps://nostarttls.secvuln.infohttps://alpine.x10host.comhttps://bugs.gentoo.org/807613#c4https://security.gentoo.org/glsa/202301-07