VYPR

Action Mailbox

by Rubyonrails

CVEs (1)

  • CVE-2026-126068LowNov 10, 2026
    risk 0.17cvss 3.7epss —

    Action Mailbox routes incoming emails to controller-like mailboxes for processing in Rails. Prior to 8.1.4.1 and 8.0.5.2, the Action Mailbox Mailgun ingress authenticates a request with an HMAC of the timestamp and token parameters concatenated without a separator, and…