CVE-2026-45713 | axllent mailpit up to 1.29.x SMTP Server /api/v1/send json.NewDecoder MaxSize denial of service

A vulnerability marked as problematic has been reported in axllent mailpit up to 1.29.x. The impacted element is the function json.NewDecoder of the file /api/v1/send of the component SMTP Server. This manipulation of the argument MaxSize causes denial of service.

The identification of this vulnerability is CVE-2026-45713. It is possible to initiate the attack remotely. There is no exploit available.