Mailhog vulnerabilities
We track 1 vulnerability in Mailhog products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on January 13, 2026.
1vulnerabilities
0critical
1high
0exploited
7.2average CVSS score
Latest Mailhog vulnerabilities
- 7.2 High severity
Mailhog: Improper Neutralization of Input During Web Page Generation
Mailhog 1.0.1 contains a stored cross-site scripting vulnerability that allows attackers to inject malicious scripts through email attachments. Attackers can send crafted emails with XSS payloads to execute arbitrary API calls, including message deletion and b