git: 22e3c0a71e35 - main - security/vuxml: Report mailpit information disclosure vuln

The branch main has been updated by madpilot:

URL: https://cgit.FreeBSD.org/ports/commit/?id=22e3c0a71e350eef0ed59ab655929c0442730f5f

commit 22e3c0a71e350eef0ed59ab655929c0442730f5f
Author:     Guido Falsi <madpilot@FreeBSD.org>
AuthorDate: 2025-10-09 11:13:39 +0000
Commit:     Guido Falsi <madpilot@FreeBSD.org>
CommitDate: 2025-10-09 11:13:39 +0000

    security/vuxml: Report mailpit information disclosure vuln
    
    Obtained from:  https://github.com/axllent/mailpit/releases/tag/v1.27.10
---
 security/vuxml/vuln/2025.xml | 28 ++++++++++++++++++++++++++++
 1 file changed, 28 insertions(+)

diff --git a/security/vuxml/vuln/2025.xml b/security/vuxml/vuln/2025.xml
index 40c4f7ffc7bb..2a15d2e48208 100644
--- a/security/vuxml/vuln/2025.xml
+++ b/security/vuxml/vuln/2025.xml
@@ -1,3 +1,31 @@
+  <vuln vid="0b5145e9-a500-11f0-a136-10ffe07f9334">
+    <topic>Mailpit -- Performance information disclosure</topic>
+    <affects>
+      <package>
+	<name>mailpit</name>
+	<range><lt>1.27.10</lt></range>
+      </package>
+    </affects>
+    <description>
+	<body xmlns="http://www.w3.org/1999/xhtml">
+	<p>Ralph Slooten (Mailpit developer) reports:</p>
+	<blockquote cite="https://github.com/axllent/mailpit/releases/tag/v1.27.10">
+	  <p>An HTTP endpoint was found which exposed expvar runtime
+	  information (memory usage, goroutine counts, GC behavior,
+	  uptime and potential runtime flags) due to the Prometheus
+	  client library dependency.</p>
+	</blockquote>
+	</body>
+    </description>
+    <references>
+      <url>https://github.com/axllent/mailpit/releases/tag/v1.27.10</url>
+    </references>
+    <dates>
+      <discovery>2025-10-09</discovery>
+      <entry>2025-10-09</entry>
+    </dates>
+  </vuln>
+
   <vuln vid="f60c790a-a394-11f0-9617-b42e991fc52e">
     <topic>Mozilla -- Incorrect boundary conditions</topic>
     <affects>