Skip to content

Mailpit has an SMTP Header Injection via Regex Bypass

Moderate severity GitHub Reviewed Published Jan 17, 2026 in axllent/mailpit • Updated Feb 2, 2026

No open alerts for this advisory

Give feedback on Dependabot alerts