CVE-2026-23845

Mailpit is an email testing tool and API for developers. Versions prior to 1.28.3 are vulnerable to Server-Side Request Forgery SSRF via HTML Check CSS Download. The HTML Check feature "/api/v1/message/ID/html-check" is designed to analyze HTML emails for compatibility. During this process, the...

CVE-2026-23845: Server-Side Request Forgery (SSRF)

Mailpit is an email testing tool and API for developers. Versions prior to 1.28.3 are vulnerable to Server-Side Request Forgery SSRF via HTML Check CSS Download. The HTML Check feature /api/v1/message/ID/html-check is designed to analyze HTML emails for compatibility. During this process, the...

Mailpit code issue vulnerabilities

Mailpit is an email testing tool developed by Ralph Slooten personally. Versions of Mailpit prior to 1.28.3 had a code vulnerability. This vulnerability stemmed from the inlineRemoteCSS function in the HTML Check feature, which allowed external CSS files to be downloaded, potentially leading to...