Skip to content

listmonk

Communication & Email

A standalone, self‑hosted newsletter and mailing list manager that runs as a single binary backed by PostgreSQL

Go Latest v6.2.0 · 1mo ago Security brief →

Features

  • Runs as a single executable binary
  • Feature‑rich mailing list and newsletter management
  • Uses PostgreSQL as the data store

Recent releases

View all 3 releases →
Upgrade now
v6.2.0 Mixed
Auth RBAC RCE / SSRF

Security fixes + CID images + trusted URLs

v6.1.0 Security relevant
Security fixes
  • Campaign and list permission validation fixes in multi-user environments
Notable features
  • Global privacy setting to disable tracking
  • S3 media file proxying
  • PATCH /api/subscribers/:id endpoint
v6.0.0 Security relevant
Security fixes
  • XSS vulnerability in campaign preview allowing arbitrary script execution
Notable features
  • TOTP two-factor authentication
  • Email-based password reset
  • List archival

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

About

Stars
22,251
Forks
2,425
Languages
Go Vue JavaScript

Install & Platforms

Install via
docker binary

Open source alternatives

Beta — feedback welcome: [email protected]