wildduck

Communication & Email

A scalable no‑single‑point‑of‑failure IMAP/POP3 mail server that uses sharded and replicated MongoDB as its backend.

Track releases GitHub Website

JavaScript Latest v1.48.2 · 9d ago Security brief →

Features

Distributed storage via sharded + replicated MongoDB
No single point of failure (no‑SPOF) architecture
IMAP and POP3 email server protocol support

Recent releases

View all 35 releases →

Review required

v1.48.2 Bug fix 9d

Dependencies

Bug fixes

Open

v1.48.1 Bug fix 23d

Security fixes

ZMS-55: Added safeguards against deflate output zip bomb

Full changelog

1.48.1 (2026-05-11)

Bug Fixes

build(deps-dev): bump fast-uri from 3.1.0 to 3.1.2 (#1066) (d1c065a)
build(deps): bump follow-redirects from 1.15.11 to 1.16.0 (#1055) (0156abf)
bump deps (#1067) (e76c480)
fix slack and deploy workflows (#1059) (ebd5b61)
ZMS-49-3: Parse negative literal size, fix literal handling, fix 0 byte literal handling, add tests (#1065) (54f42f3)
ZMS-49: Various security and QoL fixes (#1056) (2bfaa31)
ZMS-50: bump deps and fix utf-8 address parsing (#1061) (715ad37)
ZMS-55: Add safeguards against deflate output zip bomb (#1062) (c223f42)
ZMS-59: Fix bug: Audit not picking archived messages (#1064) (b844849)

View release on GitHub

v1.48.0 New feature 1mo

Notable features

S/MIME at-rest encryption support

Full changelog

1.48.0 (2026-04-09)

Features

S/MIME at-rest encryption support (#1011) (f4784d5)

Bug Fixes

add timeout to workflows (#1053) (bb9c54c)

View release on GitHub

v1.47.1 Bug fix 1mo

Changing mailbox retention now applies to existing past messages.

Full changelog

1.47.1 (2026-04-08)

Bug Fixes

ZMS-43: Changing mailbox retention applies to past messages (#1038) (8c11c3b)

View release on GitHub

v1.47.0 New feature 1mo

Notable features

Optimized Redis fanout strategy for notifications

Full changelog

1.47.0 (2026-04-08)

Features

ZMS-8: optimize redis fanout strategy for notifications (#992) (b069698)

Bug Fixes

ZMS-45: Implement totp nonce system for safer totp checks (#1042) (2eba521)
ZMS-8-2: add support for legacy wd_events channel parallel to new distributed fan-out strategy (#1044) (7bf6a9d)

View release on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.