267 matches found
CVE-2026-67446 Mailpit: Thumbnail generation decodes unbounded image dimensions before scaling
Mailpit is an email testing tool and API for developers. Prior to 1.30.4, Mailpit decodes attacker-supplied image attachments into a full raster before checking decoded dimensions, pixel count, or memory use in the GET /api/v1/message/id/part/partID/thumb endpoint. The Thumbnail handler in...
CVE-2026-67446
Mailpit , an email testing tool and API for developers, is vulnerable to a memory exhaustion issue in its thumbnail generation endpoint (GET /api/v1/message/{id}/part/{partID}/thumb). The handler in server/apiv1/thumbnails.go calls imaging.Decode() with AutoOrientation on attacker-supplied image ...
CVE-2026-67446 Mailpit: Thumbnail generation decodes unbounded image dimensions before scaling
Mailpit is an email testing tool and API for developers. Prior to 1.30.4, Mailpit decodes attacker-supplied image attachments into a full raster before checking decoded dimensions, pixel count, or memory use in the GET /api/v1/message/id/part/partID/thumb endpoint. The Thumbnail handler in...
PT-2026-79204
Name of the Vulnerable Software and Affected Versions Mailpit versions 1.30.0 through 1.30.4 Description An unauthenticated SMTP client can cause substantial memory pressure by sending a single line that exceeds the configured MaxMessageSize. This occurs because the readData function in...
PT-2026-79205
Name of the Vulnerable Software and Affected Versions Mailpit versions 1.29.0 through 1.30.5 Description An issue exists where the origin middleware in server/server.go checks the raw RequestURI for the /api/ prefix, while Go's ServeMux routes using the percent-decoded URL path. Additionally,...
PT-2026-79137
Name of the Vulnerable Software and Affected Versions Mailpit versions prior to 1.30.4 Description An unauthenticated remote SMTP client can send an oversized single command line that is fully allocated before syntax rejection or timeout occurs. This happens because the software reads SMTP comman...
CVE-2026-67447: Allocation of Resources Without Limits or Throttling
Mailpit is an email testing tool and API for developers. From 1.30.0 until 1.30.5, Mailpit's internal/smtpd/smtpd.go readData function calls bufio.Reader.ReadBytes before applying the lendata+lenline size check to the completed SMTP DATA line against Server.MaxSize. An unauthenticated SMTP client...
PT-2026-79138
Name of the Vulnerable Software and Affected Versions Mailpit versions prior to 1.30.4 Description Mailpit decodes image attachments into a full raster before verifying decoded dimensions, pixel count, or memory usage. This occurs in the GET '/api/v1/message/id/part/partID/thumb' endpoint. The...
CVE-2026-67446: Uncontrolled Resource Consumption
Mailpit is an email testing tool and API for developers. Prior to 1.30.4, Mailpit decodes attacker-supplied image attachments into a full raster before checking decoded dimensions, pixel count, or memory use in the GET /api/v1/message/id/part/partID/thumb endpoint. The Thumbnail handler in...
CVE-2026-67445: Uncontrolled Resource Consumption
Mailpit is an email testing tool and API for developers. Prior to 1.30.4, Mailpit reads SMTP commands through internal/smtpd/smtpd.go session.readLine using bufio.Reader.ReadString before session.parseLine parses the verb or the RFC 5321 512-octet command-line limit is enforced. An unauthenticate...
CVE-2026-67448: Improper Handling of URL Encoding (Hex Encoding)
Mailpit is an email testing tool and API for developers. From 1.29.0 until 1.30.6, Mailpit's server/server.go origin middleware checks the raw RequestURI for the /api/ prefix while Go's ServeMux routes using the percent-decoded URL path, and server/websockets/client.go configures...
PT-2026-80306
Summary Mailpit's SMTP DATA reader enforces the configured MaxMessageSize only after bufio.Reader.ReadBytes' ' has already buffered a complete DATA line. A remote unauthenticated SMTP client can send one line larger than the configured message-size cap and force memory allocation before Mailpit...
GO-2026-6222 vulnerabilities
Vulnerabilities for packages: ollama, pdfcpu, gitea, kubescape-server, rclone, mailpit-fips, seaweedfs-operator-fips, rclone-fips, fortio, ollama-fips, bento-fips, seaweedfs-fips, mattermost, kitty, nemo, seaweedfs-rocksdb, kubescape-server-fips, mattermost-fips, kubescape, mailpit, bento,...
CVE-2026-46603 vulnerabilities
Vulnerabilities for packages: mailpit, mattermost, bento, kubescape, gitea, pdfcpu, seaweedfs, ollama, kitty, rclone...
GO-2026-6222 vulnerabilities
Vulnerabilities for packages: mailpit, mattermost, bento, kubescape, gitea, pdfcpu, seaweedfs, ollama, kitty, rclone...
GO-2026-4815 vulnerabilities
Vulnerabilities for packages: listmonk, mailpit, ollama, rclone-fips, seaweedfs-operator-fips, seaweedfs, seaweedfs-operator, ollama-fips, rclone, mattermost-fips, seaweedfs-fips, mattermost, mailpit-fips, hugo, hugo-fips, hugo-extended...
GO-2026-5062 vulnerabilities
Vulnerabilities for packages: listmonk, mailpit, seaweedfs-rocksdb, rclone-fips, seaweedfs-operator-fips, seaweedfs, seaweedfs-rocksdb-fips, seaweedfs-operator, rclone, mattermost-fips, seaweedfs-fips, filebrowser, mattermost, gitlab-workhorse-ce, mailpit-fips, hugo, hugo-fips, hugo-extended...
GO-2026-4815 vulnerabilities
Vulnerabilities for packages: mailpit, mattermost, hugo, seaweedfs, hugo-extended, ollama, rclone...