Approved changes feed: RSS · Atom

cpe:2.3:a:mailhog:mailhog:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMailhog (0e9350dc-ba0c-517f-80f4-ae11d5d9639a)
ProductMailhog (b4adb234-d7c9-584b-817e-500fcfbd31a4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-50908 vulnerable 2026-06-08 05:52:03.689326 Mailhog 1.0.1 - Stored Cross-Site Scripting (XSS)
HIGH (7.2)
Mailhog 1.0.1 contains a stored cross-site scripting vulnerability that allows attackers to inject malicious scripts through email attachments. Attackers can send crafted emails with XSS payloads to execute arbitrary API calls, including message deletion and browser manipulation.
Published: 2026-01-13T22:51:49.736Z
Updated: 2026-04-07T14:06:37.764Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.