{"id":"GO-2026-5376","revision":"b07f5910454048a3926a9eca9ed920f1","records":[{"revision":"b07f5910454048a3926a9eca9ed920f1","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GO-2026-5376","aliases":["CVE-2026-45713","GHSA-fpxj-m5q8-fphw"],"title":"Mailpit: Unauthenticated remote memory-exhaustion DoS via unlimited SMTP DATA and /api/v1/send body sizes in github.com/axllent/mailpit","description":"Mailpit: Unauthenticated remote memory-exhaustion DoS via unlimited SMTP DATA and /api/v1/send body sizes in github.com/axllent/mailpit","state":0,"publishedAt":"2026-06-25T18:43:19+00:00","modifiedAt":"2026-06-25T19:45:19.1140464+00:00","affected":[{"ecosystem":"Go","name":"github.com/axllent/mailpit","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"1.30.0"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://github.com/axllent/mailpit/security/advisories/GHSA-fpxj-m5q8-fphw","https://github.com/axllent/mailpit/releases/tag/v1.30.0"],"sourceUrl":"https://osv.dev/vulnerability/GO-2026-5376","license":"OSV · upstream source license applies","key":"osv:GO-2026-5376","identifiers":["GO-2026-5376","CVE-2026-45713","GHSA-fpxj-m5q8-fphw"]},"retained":false,"historicalAffected":[]}],"coverage":[]}