Axllent vulnerabilities
We track 4 vulnerabilities in Axllent products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on July 20, 2026.
Latest Axllent vulnerabilities
- 7.5 High severity
mailpit: Uncontrolled Resource Consumption
Mailpit is an email testing tool and API for developers. Prior to version 1.30.0, the Mailpit SMTP server has a Server.MaxSize int field that controls the maximum allowed DATA payload size, but the field is never assigned anywhere outside test code, leaving it
- 8.2 High severity
mailpit: Improper Limitation of a Pathname to a Restricted Directory
Mailpit is an email testing tool and API for developers. Prior to version 1.30.0, the mailpit dump --http <base-url> <out-dir> sub-command downloads every message from a remote Mailpit instance and writes each one as <id>.eml inside the user-supplied output di
- 8.6 High severity
mailpit: Server-Side Request Forgery
Mailpit is an email testing tool and API for developers. Prior to version 1.29.2, the Link Check API (/api/v1/message/{ID}/link-check) is vulnerable to Server-Side Request Forgery (SSRF). The server performs HTTP HEAD requests to every URL found in an email wi
- 7.5 High severity
mailpit: Server-Side Request Forgery
Mailpit is an email testing tool and API for developers. Versions prior to 1.28.3 are vulnerable to Server-Side Request Forgery (SSRF) via HTML Check CSS Download. The HTML Check feature (`/api/v1/message/{ID}/html-check`) is designed to analyze HTML emails fo