Lucene search
K

CVE-2026-45070: Email Header Injection via Non-Token Characters in Mime Parameter Names

šŸ—“ļøĀ 01 Jan 1970Ā 00:00:00Reported byĀ OpenJS FoundationTypeĀ 
friendsofphp
Ā friendsofphp
šŸ”—Ā github.comšŸ‘Ā 3Ā Views

CVE-2026-45070 describes email header injection through non-token characters in mime parameter names.

Related
Detection
ReporterTitlePublishedViews
Family
Chainguard
CVE-2026-45070 vulnerabilities
9 Jun 202619:18
–cgr
Circl
CVE-2026-45070
20 May 202613:37
–circl
CVE
CVE-2026-45070
1 Jan 197000:00
–cve
Debian CVE
CVE-2026-45070
1 Jan 197000:00
–debiancve
Friends Of PHP
CVE-2026-45070: Email Header Injection via Non-Token Characters in Mime Parameter Names
1 Jan 197000:00
–friendsofphp
Github Security Blog
Symfony has Email Header Injection via Non-Token Characters in Mime Parameter Names
27 May 202621:09
–github
OSV
CGA-7MH3-V4HG-V8QH
9 Jun 202615:27
–osv
OSV
DEBIAN-CVE-2026-45070
21 May 202609:48
–osv
OSV
GHSA-VQC8-7275-Q272 Symfony has Email Header Injection via Non-Token Characters in Mime Parameter Names
27 May 202621:09
–osv
OSV
UBUNTU-CVE-2026-45070
21 May 202600:00
–osv
Rows per page
Vulners
Node
symfonymimeRange<8.0.12

Data

Build on a solid foundation withĀ Vulners data

WeĀ provide theĀ essential building blocks forĀ cybersecurity solutions withĀ comprehensive, structured, andĀ constantly updated vulnerability andĀ exploits data

Api

Power your application withĀ Vulners API

The Vulners REST API offers reliable, high-performance access toĀ vulnerabilityĀ intelligence, withĀ 99.9%Ā SLAĀ uptime andĀ CDN-backed data delivery forĀ seamlessĀ global access

App

Assess and manage vulnerabilities withĀ VulnersĀ tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

20 May 2026 08:00Current
5.8Medium risk
Vulners AI Score5.8
EPSS0.00056
3