—
GO-2026-6271
Mailpit: WebSocket origin check bypass via percent-encoded path (regression of CVE-2026-22689) in github.com/axllent/mailpit
Quick fix
GO-2026-6271 — github.com/axllent/mailpit: upgrade to the fixed version with the command below.
go get github.com/axllent/mailpit@v1.30.6Details
Mailpit: WebSocket origin check bypass via percent-encoded path (regression of CVE-2026-22689) in github.com/axllent/mailpit
Are you affected?
Enter the version of the package you're using.
Affected packages
Go / github.com/axllent/mailpit
Introduced in:
1.29.0 Fixed in: 1.30.6 Fix
go get github.com/axllent/mailpit@v1.30.6