PT-2026-6508 · Go · Github.Com/Axllent/Mailpit

Published 2026-02-03 · Updated 2026-02-03

OSV

Mailpit has an SMTP Header Injection via Regex Bypass in github.com/axllent/mailpit

Related Identifiers

GO-2026-4333

Affected Products

Github.Com/Axllent/Mailpit

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-23829 · Security Note
• https://osv.dev/vulnerability/GO-2026-4333 · Vendor Advisory
• https://github.com/axllent/mailpit/security/advisories/GHSA-54wq-72mp-cq7c · Note
• https://github.com/axllent/mailpit/commit/36cc06c125954dec6673219dafa084e13cc14534 · Note
• https://github.com/axllent/mailpit/releases/tag/v1.28.3 · Note