Dette er en ældre version. Den nyeste version er 1.33.0. Mailpit 1.33.0 · Udgivet:
Installationsfiler 1.31.1
| Arkitektur | Type | Omfang | Filstørrelse | Download | SHA256 |
|---|---|---|---|---|---|
| 64-bit | ZIP → Portabel | — | — | github.com | VirusTotal |
| ARM64 | ZIP → Portabel | — | — | github.com | VirusTotal |
Link og SHA256 stammer fra fællesskabets manifest i Windows Package Manager. Sammenlign hashen for den downloadede fil, før du kører den.
Udgivelsesnoter
This release adds an optional feature to mitigate DNS rebinding attacks ([read more](https://mailpit.axllent.org/docs/configuration/http/#dns-rebinding-mitigation)), as well as other hardening fixes.
### Security
• Add `--allowed-hosts` flag to mitigate DNS rebinding against the API
### Chore
• Update Go dependencies
• Update node dependencies
• Update Github Actions
### Fix
• Block Azure WireServer, IPv4-translated prefix and additional reserved ranges in SSRF deny-list
• Pass line-boundary state to drainData to prevent SMTP desync
• Allow SP inside quoted local-parts per RFC 5321 ([#731](https://github.com/axllent/mailpit/issues/731))
• Bound header-rewrite scanner to header block and fail closed on missing header
• Prevent quadratic CPU in proxy CSS rewriter via O(1) asset dedup
