Skip to content

Mailpit has an incomplete fix for GHSA-6jxm: HTML check still permits SSRF to private/loopback/IMDS via missing IP-filter dialer

Moderate severity GitHub Reviewed Published May 14, 2026 in axllent/mailpit • Updated May 19, 2026

No open alerts for this advisory

Give feedback on Dependabot alerts