CVE-2026-23845

Mailpit is an email testing tool and API for developers. Versions prior to 1.28.3 are vulnerable to Server-Side Request Forgery SSRF via HTML Check CSS Download. The HTML Check feature "/api/v1/message/ID/html-check" is designed to analyze HTML emails for compatibility. During this process, the...