ZUzubspace·Oct 27, 2019
According to [1] mailinabox seems to be not affected.
[1] https://github.com/mail-in-a-box/mailinabox/issues/1663#issu...
In PHP-FPM remote code execution bug exploited in the wildmail-in-a-box
mailinabox
Python2014–2025
mail-in-a-box / mailinabox
mailinabox
Mail-in-a-Box helps individuals take back control of their email by defining a one-click, easy-to-deploy SMTP+everything else server: a mail server in a box.
31Distinct people
38Mentions
0Explicit recommenders
15.5KGitHub stars
What to know before exploring
What it is
Mail-in-a-Box helps individuals take back control of their email by defining a one-click, easy-to-deploy SMTP+everything else server: a mail server in a box.
GitHub
Where it is used
No documented product use was verified in the last source check.
What people are saying
No recommendation phrase was found in the indexed comments.
No classified warning is attached to this page. Read the discussions before treating silence as approval.
Also in these discussions
- mailu/mailu · linked in 4 of the same discussions
- albertito/chasquid · linked in 2 of the same discussions
- foxcpp/maddy · linked in 2 of the same discussions
Mentioned in the same Hacker News threads. That is not proof they are substitutes.
This week on Hacker News
Nov 8–Nov 15 UTC · Direct repository links and separately labeled related project stories. Indexed through 11/15/2026, 10:49:33 PM UTC.
No direct repository links were found in the indexed HN discussions over the past seven days. Older discussions are available below.
Mentions over time
HN mentions by year38 dated mentions
Observed mentions: 2014-04-23 15:22:16 UTC to 2025-01-27 04:18:20 UTC.
Counts come from the repository’s dated source evidence. Index cutoff: 2026-11-02 08:16:59 UTC.
View mention counts and date ranges
| Period | Start (UTC) | End (exclusive, UTC) | Mentions | Submissions | Comments |
|---|---|---|---|---|---|
| 2014 | 2014-01-01 00:00:00 UTC | 2015-01-01 00:00:00 UTC | 6 | 1 | 5 |
| 2015 | 2015-01-01 00:00:00 UTC | 2016-01-01 00:00:00 UTC | 2 | 2 | 0 |
| 2016 | 2016-01-01 00:00:00 UTC | 2017-01-01 00:00:00 UTC | 6 | 2 | 4 |
| 2017 | 2017-01-01 00:00:00 UTC | 2018-01-01 00:00:00 UTC | 0 | 0 | 0 |
| 2018 | 2018-01-01 00:00:00 UTC | 2019-01-01 00:00:00 UTC | 6 | 1 | 5 |
| 2019 | 2019-01-01 00:00:00 UTC | 2020-01-01 00:00:00 UTC | 4 | 0 | 4 |
| 2020 | 2020-01-01 00:00:00 UTC | 2021-01-01 00:00:00 UTC | 2 | 1 | 1 |
| 2021 | 2021-01-01 00:00:00 UTC | 2022-01-01 00:00:00 UTC | 2 | 0 | 2 |
| 2022 | 2022-01-01 00:00:00 UTC | 2023-01-01 00:00:00 UTC | 4 | 0 | 4 |
| 2023 | 2023-01-01 00:00:00 UTC | 2024-01-01 00:00:00 UTC | 1 | 1 | 0 |
| 2024 | 2024-01-01 00:00:00 UTC | 2025-01-01 00:00:00 UTC | 4 | 0 | 4 |
| 2025 | 2025-01-01 00:00:00 UTC | 2026-01-01 00:00:00 UTC | 1 | 0 | 1 |
What Hacker News says
4 sourcesEven though I think story is fake I encourage everyone to setup their own mail server using Mail-in-a-Box [0].
You just need one VPS with public IP and domain name and it's fully automated solution that works great.
[0] https://mailinabox.email/
https://github.com/mail-in-a-box/mailinabox
In “My Google account got suspended because of NewPipe”FYI, there are some already
https://github.com/mail-in-a-box/mailinabox
https://github.com/Mailu/Mailu
In Ask HN: How sensible is it to host my own email server on Linode or DO?ehh... it's been known for awhile that protonmail is in the pockets of the US government so it's not really a loss for the russian people.
What they should be using is either Streisand[0] email with a server in a country that respects their privacy(neitherlands, panama, etc) or lavabit email[1].
[0]: https://github.com/StreisandEffect/streisand
[1]: https://lavabit.com/
EDIT --
Sorry streisand doesn't in fact have an e-mail server. I thought it did at one point. I guess you can use mail-in-a-box(https://github.com/mail-in-a-box/mailinabox).
In Russia blocks ProtonMail