Mailpit code issue vulnerabilities

Mailpit is an email testing tool developed by Ralph Slooten personally. Versions of Mailpit prior to 1.28.3 had a code vulnerability. This vulnerability stemmed from the inlineRemoteCSS function in the HTML Check feature, which allowed external CSS files to be downloaded, potentially leading to...

CVE-2026-23845: Server-Side Request Forgery (SSRF)

Mailpit is an email testing tool and API for developers. Versions prior to 1.28.3 are vulnerable to Server-Side Request Forgery SSRF via HTML Check CSS Download. The HTML Check feature /api/v1/message/ID/html-check is designed to analyze HTML emails for compatibility. During this process, the...