01 Record

CVE-2026-67446

Mailpit: Thumbnail generation decodes unbounded image dimensions before scaling

MediumPUBLISHEDCNA: GitHub_M

Base score5.3 CVSS v3.xCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

02 Description

Mailpit: Thumbnail generation decodes unbounded image dimensions before scaling

Published

2026-08-20 21:10Z1 DAY AGO

Last updated

2026-08-20 21:10Z1 DAY AGO

Reserved

2026-07-29

Assigning CNA

GitHub_M

Record state

PUBLISHED

Severity

Medium (CVSS 5.3)

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Weaknesses

SSVC decision

No CISA-ADP assessment

Data version

5.2

Document digest

07d69ced9f8a656a022d9f5f27413410e7d9ba78994487a4b37a65514662f26b

VendorProductVersionsPlatforms

axllentmailpit< 1.30.4—