Skip to content
OpenAdvisories
Medium WID-SEC-2026-1558 4 CVEs

MailPit: Mehrere Schwachstellen

Published May 17, 2026 · Updated Jul 20, 2026 · Revision 2 · de-DE

Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in MailPit ausnutzen, um Dateien zu manipulieren, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu verursachen.

Product

Mailpit ist ein Open-Source-E-Mail-Testwerkzeug, das als lokaler SMTP-Server zum Auffangen und Anzeigen von E-Mails dient, ohne diese tatsächlich zu versenden.

Vulnerabilities 4

  • High 7.5
    CVE-2026-45713

    Mailpit: Unauthenticated remote memory-exhaustion DoS via unlimited SMTP DATA and /api/v1/send body sizes

    Mailpit is an email testing tool and API for developers. Prior to version 1.30.0, the Mailpit SMTP server has a Server.MaxSize int field that controls the maximum allowed DATA payload size, but the field is never assigned anywhere outside test code, leaving i…

    axllent mailpit github.com/axllent/mailpit Go
  • Medium 5.9
    CVE-2026-45711

    Mailpit: Path traversal & arbitrary file write in mailpit dump --http via attacker-controlled message IDs

    Mailpit is an email testing tool and API for developers. Prior to version 1.30.0, the mailpit dump --http <base-url> <out-dir> sub-command downloads every message from a remote Mailpit instance and writes each one as <id>.eml inside the user-supplied output d…

    axllent mailpit github.com/axllent/mailpit Go
  • Medium 5.9
    CVE-2026-45712

    Mailpit: Concurrent map read & write in proxy CSS rewriter - remote unauth crash (fatal error: concurrent map read and map write)

    Mailpit is an email testing tool and API for developers. Prior to version 1.30.0, the screenshot/print proxy (/proxy?data=…) maintains a package-level assets map[string]MessageAssets cache, but reads the map without holding assetsMutex while a long-running cl…

    axllent mailpit github.com/axllent/mailpit Go
  • Medium 5.8
    CVE-2026-45709

    Mailpit has an incomplete fix for GHSA-6jxm: HTML check still permits SSRF to private/loopback/IMDS via missing IP-filter dialer

    Mailpit is an email testing tool and API for developers. The fix for GHSA-6jxm-fv7w-rw5j (CVE-2026-23845, "Server-Side Request Forgery (SSRF) via HTML Check API"), shipped in mailpit `v1.28.3`, hardened `internal/htmlcheck/css.go::downloadCSSToBytes` with a 5…

    axllent mailpit github.com/axllent/mailpit Go

Revision history

  1. #2

    Referenz(en) aufgenommen: EUVD-2026-45966, GHSA-6JXM-FV7W-RW5J, EUVD-2026-45967, EUVD-2026-45972, EUVD-2026-45971

  2. #1

    Initiale Fassung

References