This security release fixes CVE-2026-27808: users could use the Link Check API to probe internal network IPs/hostnames. The exploit required user access to both the API and the SMTP server, so the risk is limited to users who have publicly-accessible Mailpit instances with no authentication on both the API and SMTP server.

Key change:

• New opt-in flag: --allow-internal-http-requests (env MP_ALLOW_INTERNAL_HTTP_REQUESTS=true). When enabled, the Link Check API and UI screenshot proxy may access internal-network IPs.

Action required:

• This is potentially breaking for test suites that depend on Link Check probing internal resources - review and update tests as needed.

A huge thanks to the security researcher (@rtvkiz) who reported this issue responsibly.

Changelog:

Security

• Prevent Server-Side Request Forgery (SSRF) via Link Check API (CVE-2026-27808)

Chore

• Upgrade eslint JavaScript linting
• Update Go dependencies
• Update node dependencies
• Update caniemail test database

Fix

• Update install instructions when setting INSTALL_PATH
• Include 8BITMIME in SMTPD EHLO response (#648)

https://github.com/memcached/memcached/wiki/ReleaseNotes1641

Fixed license key activation failing issue
Fixed request latency regression
Fixed secret variables not loading on app relaunch
Fixed .env file not being picked up in collections

https://gitlab.com/git-scm/git/-/blob/HEAD/Documentation/RelNotes/2.53.0.adoc

https://github.com/composer/composer/compare/2.9.4...2.9.5

12.2.2 - https://mariadb.com/docs/release-notes/community-server/12.2/12.2.2
11.8.6 - https://mariadb.com/docs/release-notes/community-server/11.8/11.8.6

9.6.0 - https://dev.mysql.com/doc/relnotes/mysql/9.6/en/news-9-6-0.html
8.4.8 - https://dev.mysql.com/doc/relnotes/mysql/8.4/en/news-8-4-8.html
8.0.45 - https://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-45.html

PHP 8.5.3 - https://www.php.net/ChangeLog-8.php#8.5.3
PHP 8.4.18 - https://www.php.net/ChangeLog-8.php#8.4.18

turns off "opcache" by default

https://strawberryperl.com/release-notes/5.42.0.1-64bit.html