CVE-2026-45713

🗓️ 20 Jul 2026 15:01:01Reported by GitHub_MType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 18 Views

Mailpit permits unauthenticated memory DoS via unlimited SMTP DATA and API body sizes; fixed.

Reporter	Title	Published	Views	Family All 16
FreeBSD	mail/mailpit -- multiple vulnerabilities	14 May 202600:00	–	freebsd
Circl	CVE-2026-45713	14 May 202604:53	–	circl
Cvelist	CVE-2026-45713 Mailpit: Unauthenticated remote memory-exhaustion DoS via unlimited SMTP DATA and /api/v1/send body sizes	20 Jul 202615:01	–	cvelist
EUVD	EUVD-2026-45972	20 Jul 202615:01	–	euvd
Tenable Nessus	FreeBSD : mail/mailpit -- multiple vulnerabilities (6e701ad2-4f61-11f1-af6d-10ffe07f9334)	15 May 202600:00	–	nessus
Github Security Blog	Mailpit: Unauthenticated remote memory-exhaustion DoS via unlimited SMTP DATA and /api/v1/send body sizes	19 May 202615:54	–	github
NVD	CVE-2026-45713	20 Jul 202616:17	–	nvd
OSV	CVE-2026-45713 Mailpit: Unauthenticated remote memory-exhaustion DoS via unlimited SMTP DATA and /api/v1/send body sizes	20 Jul 202615:01	–	osv
OSV	GHSA-FPXJ-M5Q8-FPHW Mailpit: Unauthenticated remote memory-exhaustion DoS via unlimited SMTP DATA and /api/v1/send body sizes	19 May 202615:54	–	osv
OSV	GO-2026-5376 Mailpit: Unauthenticated remote memory-exhaustion DoS via unlimited SMTP DATA and /api/v1/send body sizes in github.com/axllent/mailpit	25 Jun 202618:43	–	osv

Vulners

Node

axllent mailpitRange<1.30.0

[
  {
    "vendor": "axllent",
    "product": "mailpit",
    "versions": [
      {
        "version": "< 1.30.0",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/axllent/mailpit/security/advisories/GHSA-fpxj-m5q8-fphw
github	www.github.com/axllent/mailpit/releases/tag/v1.30.0

21 Jul 2026 20:25Current

5.4Medium risk

Vulners AI Score5.4

CVSS 3.17.5

EPSS0.00099

SSVC