GO-2026-4284
NoneCVSS
—
EPSS
—
Published
Jan 12, 2026
CISA due date
—
The record
Mailpit Proxy Endpoint has Server-Side Request Forgery (SSRF) vulnerability in github.com/axllent/mailpit
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Go | github.com/axllent/mailpit | 0 | 1.28.1 |
Related vulnerabilities
- CVE-2026-21859 Mailpit is an email testing tool and API for developers. Same vulnerability
- GHSA-mpf7-p9x7-96r3 Mailpit is Vulnerable to Server-Side Request Forgery (SSRF) via Link Check API Also affects github.com/axllent/mailpit
- CVE-2026-27808 Mailpit is an email testing tool and API for developers. Also affects github.com/axllent/mailpit
- GO-2026-4333 Mailpit has an SMTP Header Injection via Regex Bypass in github.com/axllent/mailpit Also affects github.com/axllent/mailpit
- GO-2026-4345 Mailpit has a Server-Side Request Forgery (SSRF) via HTML Check API in… Also affects github.com/axllent/mailpit
- GO-2026-4310 Mailpit is vulnerable to Cross-Site WebSocket Hijacking (CSWSH) allowing unauthenticated… Also affects github.com/axllent/mailpit
- CVE-2026-23845 Mailpit is an email testing tool and API for developers. Also affects github.com/axllent/mailpit
- CVE-2026-23829 Mailpit is an email testing tool and API for developers. Also affects github.com/axllent/mailpit