Skip to content
OpenAdvisories

Vendor

axllent

16 known vulnerabilities.

Products

mailpit 16
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2026-23829 Public exploit Scanner template

    Mailpit has SMTP Header Injection via Regex Bypass

    Mailpit is an email testing tool and API for developers. Prior to version 1.28.3, Mailpit's SMTP server is vulnerable to Header Injection due to an insufficient Regular Expression used to validate `RCPT TO` and `MAIL FROM` addresses. An attacker can inject ar…

    axllent mailpit github.com/axllent/mailpit Go