axllent

Records16All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

axllent records in CISA KEV

No axllent vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Mailpit 10 records HIGH

Records

10 records in Mailpit · all components

TI-2026-22161 CVE-2026-27808 · GHSA-mpf7-p9x7-96r3

Mailpit is Vulnerable to Server-Side Request Forgery (SSRF) via Link Check API

HIGH 76

Mailpit is an email testing tool and API for developers.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00532 Published 2026-02-25 Fixed in 1.29.2 CWE-918

TI-2026-33452 CVE-2026-45713 · GHSA-fpxj-m5q8-fphw

Mailpit: Unauthenticated remote memory-exhaustion DoS via unlimited SMTP DATA and /api/v1/send body sizes

HIGH 72

Mailpit is an email testing tool and API for developers.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00607 Published 2026-07-20 Fixed in 1.30.0 CWE-400

TI-2026-33450 CVE-2026-45711 · GHSA-qx5x-85p8-vg4j

Mailpit: Path traversal & arbitrary file write in mailpit dump --http via attacker-controlled message IDs

HIGH 69

Mailpit is an email testing tool and API for developers.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00389 Published 2026-07-20 Fixed in 1.30.0 CWE-22

TI-2026-17561 CVE-2026-21859 · GHSA-8v65-47jx-7mfr

Mailpit Proxy Endpoint is Vulnerable to Server-Side Request Forgery (SSRF)

HIGH 65

Mailpit is an email testing tool and API for developers.

CVSS 3.1MEDIUM 5.8 Network No auth No interaction EPSS 0.00813 Published 2026-01-07 Fixed in 1.28.1 CWE-918

TI-2026-19194 CVE-2026-23829 · GHSA-54wq-72mp-cq7c

Mailpit has SMTP Header Injection via Regex Bypass

MEDIUM 63

Mailpit is an email testing tool and API for developers.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01402 Published 2026-01-18 Fixed in 1.28.3 CWE-150

TI-2026-33451 CVE-2026-45712 · GHSA-w4vj-r5pg-3722

Race condition in axllent mailpit

MEDIUM 60

Mailpit is an email testing tool and API for developers.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00336 Published 2026-07-20 Fixed in 1.30.0 CWE-362

TI-2026-19208 CVE-2026-23845 · GHSA-6jxm-fv7w-rw5j

Mailpit Vulnerable to Server-Side Request Forgery (SSRF) via HTML Check API

LOW 39

Mailpit is an email testing tool and API for developers.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00431 Published 2026-01-19 Fixed in 1.28.3 CWE-918

TI-2026-33449 CVE-2026-45709 · GHSA-j3fj-qppj-fmmc

Server-side request forgery in axllent mailpit

LOW 32

Mailpit is an email testing tool and API for developers.

CVSS 3.1MEDIUM 5.8 Network No auth No interaction EPSS 0.00316 Published 2026-07-20 Fixed in 1.30.0 CWE-918

TI-2026-36093 CVE-2026-48824 · GHSA-28pq-6qxg-wg5r

Resource allocation without limits in axllent mailpit

LOW 31

Mailpit is an email testing tool and API for developers.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00541 Published 2026-07-20 Fixed in 1.30.1 CWE-770

TI-2026-18216 CVE-2026-22689 · GHSA-524m-q5m7-79mm

Mailpit is vulnerable to Cross-Site WebSocket Hijacking (CSWSH) allowing unauthenticated access to emails

LOW 28

Mailpit is an email testing tool and API for developers.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00239 Published 2026-01-10 Fixed in 1.28.2, 0.0.0-20260110031614 CWE-1385

Open these records in search →