mailhog/MailHog

Releases28

Frequency3 months 1 week

Last Release over 4 years ago

Stars16K

Web and API based SMTP testing

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2022-50908 ↗	Jan 13, 2026Tuesday, 13 January 2026, 23:15	7.2 HIGH	—
Mailhog 1.0.1 contains a stored cross-site scripting vulnerability that allows attackers to inject malicious scripts through email attachments. Attackers can send crafted emails with XSS payloads to execute arbitrary API calls, including message deletion and browser manipulation.