{"id":"GO-2026-5689","revision":"3501472ee62048928537aecd80b58554","records":[{"revision":"3501472ee62048928537aecd80b58554","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GO-2026-5689","aliases":["CVE-2026-45712","GHSA-w4vj-r5pg-3722"],"title":"Mailpit: Concurrent map read & write in proxy CSS rewriter - remote unauth crash (fatal error: concurrent map read and map write) in github.com/axllent/mailpit","description":"Mailpit: Concurrent map read & write in proxy CSS rewriter - remote unauth crash (fatal error: concurrent map read and map write) in github.com/axllent/mailpit","state":0,"publishedAt":"2026-06-25T22:34:38+00:00","modifiedAt":"2026-06-25T23:01:28.0310277+00:00","affected":[{"ecosystem":"Go","name":"github.com/axllent/mailpit","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"1.30.0"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://github.com/axllent/mailpit/security/advisories/GHSA-w4vj-r5pg-3722","https://github.com/axllent/mailpit/releases/tag/v1.30.0"],"sourceUrl":"https://osv.dev/vulnerability/GO-2026-5689","license":"OSV · upstream source license applies","key":"osv:GO-2026-5689","identifiers":["GO-2026-5689","CVE-2026-45712","GHSA-w4vj-r5pg-3722"]},"retained":false,"historicalAffected":[]}],"coverage":[]}