{"id":"GO-2026-5688","revision":"9775db5e3b1245abbc0aed4ec8587c31","records":[{"revision":"9775db5e3b1245abbc0aed4ec8587c31","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GO-2026-5688","aliases":["CVE-2026-55187","GHSA-w4mc-hhc6-xp28"],"title":"Mailpit: Incomplete SSRF protection in Link Check API via IPv6 transition mechanisms in github.com/axllent/mailpit","description":"Mailpit: Incomplete SSRF protection in Link Check API via IPv6 transition mechanisms in github.com/axllent/mailpit","state":0,"publishedAt":"2026-06-25T22:34:38+00:00","modifiedAt":"2026-06-25T23:01:26.8296694+00:00","affected":[{"ecosystem":"Go","name":"github.com/axllent/mailpit","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"1.30.2"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://github.com/axllent/mailpit/security/advisories/GHSA-w4mc-hhc6-xp28"],"sourceUrl":"https://osv.dev/vulnerability/GO-2026-5688","license":"OSV · upstream source license applies","key":"osv:GO-2026-5688","identifiers":["GO-2026-5688","CVE-2026-55187","GHSA-w4mc-hhc6-xp28"]},"retained":false,"historicalAffected":[]}],"coverage":[]}