{"id":"GO-2026-6272","revision":"1df95e0e113e474f963e7f10753b0e04","records":[{"revision":"1df95e0e113e474f963e7f10753b0e04","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GO-2026-6272","aliases":["CVE-2026-67447","GHSA-r553-m4fv-5v97"],"title":"Mailpit: SMTP DATA line reader buffers over-limit input before size enforcement in github.com/axllent/mailpit","description":"Mailpit: SMTP DATA line reader buffers over-limit input before size enforcement in github.com/axllent/mailpit","state":0,"publishedAt":"2026-08-25T19:43:10+00:00","modifiedAt":"2026-08-26T01:21:40.6111759+00:00","affected":[{"ecosystem":"Go","name":"github.com/axllent/mailpit","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"1.30.0"},{"kind":"fixed","version":"1.30.5"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://github.com/axllent/mailpit/security/advisories/GHSA-r553-m4fv-5v97","https://github.com/axllent/mailpit/commit/8720c6bd8281fc00d458081908f1dbef8e59a98c","https://github.com/axllent/mailpit/releases/tag/v1.30.5"],"sourceUrl":"https://osv.dev/vulnerability/GO-2026-6272","license":"OSV · upstream source license applies","key":"osv:GO-2026-6272","identifiers":["GO-2026-6272","CVE-2026-67447","GHSA-r553-m4fv-5v97"]},"retained":false,"historicalAffected":[]}],"coverage":[]}