Security fixes in mailpit-fips 1.29.6-r0 (CVE-2026-33812)
Affects mailpit-fipsSource GCVE Database
Mentioned vulnerabilities
Not known to be exploited · fixed in 1.29.6-r0 : update mailpit-fips when convenient.
Data as of 10/25/2026, 07:59:04 UTC
CVSS not yet scored by NVD
- Exploitation
Not in CISA KEV, no exploitation reported
- EPSS
- 0.1% chance of exploitation in 30 days – higher than 4% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
- Patch
- Available – fixed in 1.29.6-r0
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| CleanStartmailpit-fips | Affected
| Fixed in
|
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
Users should upgrade to mailpit-fips version 1.29.6-r0 to apply the official security fixes for CVE-2026-33812 and CVE-2026-33813. No additional mitigation guidance is provided or required based on the available information.
Description
The mailpit-fips package version 1.29.6-r0 addresses two security vulnerabilities identified as CVE-2026-33812 and CVE-2026-33813. A patch is available in this version to fix these issues. No detailed technical information or CVSS score is provided for these vulnerabilities, and there are no known exploits in the wild at this time.
Impact
The vulnerabilities fixed in mailpit-fips 1.29.6-r0 could potentially affect users running versions prior to 1.29.6-r0. Since no known exploits are reported and no detailed impact information is provided, the exact impact is unclear but the presence of a patch indicates a security risk that has been addressed.