Security Update Completed – CVE-2026-109618 and CVE-2026-109619

Incident Report for Mailparser

Resolved

We are aware of the recently disclosed critical PHP security vulnerabilities (CVE-2026-109618 and CVE-2026-109619).

Our engineering team has completed the necessary security updates to address these vulnerabilities in Mailparser's infrastructure as of October 21, 2026.

The required patches have been applied, and no action is required from customers.
Posted Oct 21, 2026 - 14:00 EDT