CVE-2026-45713

🗓️ 20 Jul 2026 15:01:01Reported by GitHub_MType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 75 Views🌐 WEB

Mailpit permits unauthenticated memory DoS via unlimited SMTP DATA and API body sizes; fixed.

Reporter	Title	Published	Views	Family All 19
FreeBSD	mail/mailpit -- multiple vulnerabilities	14 May 202600:00	–	freebsd
Circl	CVE-2026-45713	14 May 202604:53	–	circl
Cvelist	CVE-2026-45713 Mailpit: Unauthenticated remote memory-exhaustion DoS via unlimited SMTP DATA and /api/v1/send body sizes	20 Jul 202615:01	–	cvelist
EUVD	EUVD-2026-45972	20 Jul 202615:01	–	euvd
Tenable Nessus	FreeBSD : mail/mailpit -- multiple vulnerabilities (6e701ad2-4f61-11f1-af6d-10ffe07f9334)	15 May 202600:00	–	nessus
Github Security Blog	Mailpit: Unauthenticated remote memory-exhaustion DoS via unlimited SMTP DATA and /api/v1/send body sizes	19 May 202615:54	–	github
Mend	CVE-2026-45713	20 Jul 202615:01	–	mend
NVD	CVE-2026-45713	20 Jul 202616:17	–	nvd
osv_ghsa	GHSA-FPXJ-M5Q8-FPHW Mailpit: Unauthenticated remote memory-exhaustion DoS via unlimited SMTP DATA and /api/v1/send body sizes	19 May 202615:54	–	osv_ghsa
osv_go	GO-2026-5376 Mailpit: Unauthenticated remote memory-exhaustion DoS via unlimited SMTP DATA and /api/v1/send body sizes in github.com/axllent/mailpit	25 Jun 202618:43	–	osv_go

NVD

Vulners

Node

axllent mailpitRange<1.30.0

[
  {
    "vendor": "axllent",
    "product": "mailpit",
    "versions": [
      {
        "version": "< 1.30.0",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/axllent/mailpit/security/advisories/GHSA-fpxj-m5q8-fphw
github	www.github.com/axllent/mailpit/releases/tag/v1.30.0

Parameter	Position	Path	Description	CWE
body	request body	/api/v1/send	The /api/v1/send endpoint decodes the request body using json.NewDecoder(r.Body) without an http.MaxBytesReader, allowing an attacker to send an arbitrarily large payload to cause memory exhaustion (OOM).	CWE-400, CWE-770

24 Oct 2026 20:10Current

8.2High risk

Vulners AI Score8.2

CVSS 3.17.5

EPSS0.00607

SSVC