DeutschShown in its original language — a full translation is planned for a future version.
MailPit: Mehrere Schwachstellen
view advisory published 2026-05-17
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in MailPit ausnutzen, um Dateien zu manipulieren, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu verursachen.
01
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-45713US | — | — | ||
Mailpit is an email testing tool and API for developers. Prior to version 1.30.0, the Mailpit SMTP server has a Server.MaxSize int field that controls the maximum allowed DATA payl… | ||||
| CVE-2026-45712US | — | — | ||
Mailpit is an email testing tool and API for developers. Prior to version 1.30.0, the screenshot/print proxy (/proxy?data=…) maintains a package-level assets map[string]MessageAsse… | ||||
| CVE-2026-45711US | high8.2 | — | ||
Mailpit is an email testing tool and API for developers. Prior to version 1.30.0, the mailpit dump --http <base-url> <out-dir> sub-command downloads every message from a remote Mai… | ||||
| CVE-2026-45709US | — | — | ||
Mailpit is an email testing tool and API for developers. The fix for GHSA-6jxm-fv7w-rw5j (CVE-2026-23845, "Server-Side Request Forgery (SSRF) via HTML Check API"), shipped in mailp… | ||||
02
references
External citations — patches, advisories, analysis.
- GitHub Security Advisory GHSA-J3FJ-QPPJ-FMMC vom 2026-05-17external
- GitHub Security Advisory GHSA-W4VJ-R5PG-3722 vom 2026-05-17external
- GitHub Security Advisory GHSA-fpxj-m5q8-fphw vom 2026-05-17external
- GitHub Security Advisory GHSA-qx5x-85p8-vg4j vom 2026-05-17external
- WID-SEC-W-2026-1558 - CSAF Versionself
- WID-SEC-2026-1558 - Portal Versionself
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan