Skip to content

Mailpit 1.30.2

Latest

Choose a tag to compare

@N6REJ N6REJ released this 18 Jun 05:03
· 6 commits to main since this release

This release includes an important security fixes, so upgrading is strongly recommended.
This release includes a security fix which closes an additional IPv6 address bypasses that could allow the Link Check API to reach internal services or cloud metadata endpoints.

Security
Fix incomplete SSRF protection in IsInternalIP() detection for IPv6 transition mechanisms (GHSA-w4mc-hhc6-xp28)
Feature
Add wait support to readyz (axllent/mailpit#697)
Chore
Compress websocket messages once per broadcast to improve performance (axllent/mailpit#695)
Toggle websocket compression using HTTP compression setting (axllent/mailpit#695)
Update Github Actions dependencies
Update Go dependencies
Update node dependencies
Fix
Adjust header setting order in error response functions (axllent/mailpit#699)
Test
Add readyz tests