Mailpit: Incomplete SSRF protection in Link Check API via IPv6 transition mechanisms (follow-up to CVE-2026-27808)

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-55187 · Microsoft / collected KEV context

EUVD-2026-43052

GHSA-w4mc-hhc6-xp28

GO-2026-5688

cve-program · CVE-2026-55187

• https://github.com/axllent/mailpit/security/advisories/GHSA-w4mc-hhc6-xp28
• https://github.com/axllent/mailpit/commit/a88dadbbe1df016a35a445089ef2a362a6c2de78
• https://github.com/axllent/mailpit/releases/tag/v1.30.2

euvd · EUVD-2026-43052

• https://github.com/axllent/mailpit/security/advisories/GHSA-w4mc-hhc6-xp28
• https://github.com/axllent/mailpit/commit/a88dadbbe1df016a35a445089ef2a362a6c2de78
• https://github.com/axllent/mailpit/releases/tag/v1.30.2

nvd · CVE-2026-55187

• https://github.com/axllent/mailpit/commit/a88dadbbe1df016a35a445089ef2a362a6c2de78
• https://github.com/axllent/mailpit/releases/tag/v1.30.2
• https://github.com/axllent/mailpit/security/advisories/GHSA-w4mc-hhc6-xp28

osv · GHSA-w4mc-hhc6-xp28

• https://github.com/axllent/mailpit/security/advisories/GHSA-w4mc-hhc6-xp28
• https://nvd.nist.gov/vuln/detail/CVE-2026-55187
• https://github.com/axllent/mailpit/commit/a88dadbbe1df016a35a445089ef2a362a6c2de78
• https://github.com/axllent/mailpit
• https://github.com/axllent/mailpit/releases/tag/v1.30.2

osv · GO-2026-5688

• https://github.com/axllent/mailpit/security/advisories/GHSA-w4mc-hhc6-xp28

No related operational record is retained in the current change model.