tocsin

CVE-2026-27808

2 advisories.

Go/github.com/axllent/mailpit CVE-2026-27808: medium 5.8, EPSS 0.62%

Mailpit is Vulnerable to Server-Side Request Forgery (SSRF) via Link Check API

Action: Upgrade github.com/axllent/mailpit to 1.29.2 or later.

go get github.com/axllent/mailpit@v1.29.2

Affected

introducedfixedlast affected
01.29.2-

Fixed versions

1.29.2

Sources

CVE-2026-27808 · published · modified · JSON

Go/github.com/axllent/mailpit CVE-2026-27808: unknown, EPSS 0.62%

Mailpit is Vulnerable to Server-Side Request Forgery (SSRF) via Link Check API in github.com/axllent/mailpit

Action: Upgrade github.com/axllent/mailpit to 1.29.2 or later.

go get github.com/axllent/mailpit@v1.29.2

Affected

introducedfixedlast affected
01.29.2-

Fixed versions

1.29.2

Sources

CVE-2026-27808 · published · modified · JSON