Skip to content
OpenAdvisories

Package · Go

github.com/axllent/mailpit

15 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2026-23829 Public exploit

    Mailpit has SMTP Header Injection via Regex Bypass

    Mailpit is an email testing tool and API for developers. Prior to version 1.28.3, Mailpit's SMTP server is vulnerable to Header Injection due to an insufficient Regular Expression used to validate `RCPT TO` and `MAIL FROM` addresses. An attacker can inject ar…

    axllent mailpit github.com/axllent/mailpit Go