mailpit — Vulnerabilities & Security Advisories 16

All 16 CVE vulnerabilities found in mailpit, with AI-generated Chinese analysis, references, and POCs.

This page aggregates vulnerability records for Mailpit, an open-source SMTP debugging server. It collects security advisories related to this product and covers vulnerabilities disclosed within the last five years. Readers can track the vendor's security updates, understand the associated weakness class, and review the product's historical vulnerability data.

Vendor: axllent

CVE ID	Title	CVSS	Severity	Published
CVE-2026-84697	Mailpit SSRF Deny List Bypass via Azure Metadata and IPv6 Prefix CWE-918	5.3	Medium	2026-09-02
CVE-2026-67448	Mailpit: WebSocket origin check bypass via percent-encoded path (regression of CVE-2026-22689) CWE-177	6.5	Medium	2026-08-20
CVE-2026-67447	Mailpit: SMTP DATA line reader buffers over-limit input before size enforcement CWE-770	5.3	Medium	2026-08-20
CVE-2026-67445	Mailpit: SMTP command parser buffers unbounded command lines before syntax rejection CWE-400	5.3	Medium	2026-08-20
CVE-2026-67446	Mailpit: Thumbnail generation decodes unbounded image dimensions before scaling CWE-400	5.3	Medium	2026-08-20
CVE-2026-48824	Mailpit: Sibling-endpoint memory-exhaustion DoS via unbounded JSON body on /api/v1/messages, /api/v1/tags, and /api/v1/message/{id}/release (incomplete fix of GHSA-fpxj-m5q8-fphw) CWE-770	5.3	Medium	2026-07-20
CVE-2026-45713	Mailpit: Unauthenticated remote memory-exhaustion DoS via unlimited SMTP DATA and /api/v1/send body sizes CWE-400	7.5	High	2026-07-20
CVE-2026-45712	Mailpit: Concurrent map read & write in proxy CSS rewriter - remote unauth crash (fatal error: concurrent map read and map write) CWE-362	5.9	Medium	2026-07-20
CVE-2026-45711	Mailpit: Path traversal & arbitrary file write in mailpit dump --http via attacker-controlled message IDs CWE-22	5.9	Medium	2026-07-20
CVE-2026-45709	Mailpit has an incomplete fix for GHSA-6jxm: HTML check still permits SSRF to private/loopback/IMDS via missing IP-filter dialer CWE-918	5.8	Medium	2026-07-20
CVE-2026-55187	Mailpit: Incomplete SSRF protection in Link Check API via IPv6 transition mechanisms (follow-up to CVE-2026-27808) CWE-918	5.8	Medium	2026-07-10
CVE-2026-27808	Mailpit is Vulnerable to Server-Side Request Forgery (SSRF) via Link Check API CWE-918	5.8	Medium	2026-02-25
CVE-2026-23845	Mailpit Vulnerable to Server-Side Request Forgery (SSRF) via HTML Check API CWE-918	5.8	Medium	2026-01-19
CVE-2026-23829	Mailpit has SMTP Header Injection via Regex Bypass CWE-93	5.3	Medium	2026-01-18
CVE-2026-22689	Mailpit is vulnerable to Cross-Site WebSocket Hijacking (CSWSH) allowing unauthenticated access to emails CWE-1385	6.5	Medium	2026-01-10
CVE-2026-21859	Mailpit Proxy Endpoint is Vulnerable to Server-Side Request Forgery (SSRF) CWE-918	5.8	Medium	2026-01-07

All 16 known CVE vulnerabilities affecting mailpit with full Chinese analysis, references, and POCs where available.