Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Mailhog 1.0.1‑r2 could let attackers read or change data
published 2 months ago
Summary
The Mailhog email testing tool version 1.0.1‑r2 has two security flaws that could allow an attacker to see or modify the messages it stores. Updating to the latest version fixes these problems. Apply the update as soon as possible to keep your email testing environment secure.
What to do
- Update cleanstart mailhog to version 1.0.1-r2.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | mailhog |
< 1.0.1-r2 Fix: upgrade to 1.0.1-r2
|
Original advisory text
Security fixes in mailhog 1.0.1-r2
Package mailhog version 1.0.1-r2 fixes 2 vulnerabilities: CVE-2026-39822, CVE-2026-42505
References
Timeline
Published1 Sep 2026
Updated18 Sep 2026
First seen18 Sep 2026
Sources
CLEANSTART-2026-KZ00628 · OSV
Track software like this
Free during beta