CVE-2026-61908

JMAP email-header blob ID out-of-bounds index: An authenticated user could attempt to download a specially crafted JMAP blob ID of the form H-, which could read past the end of the internal blobheaders array during download, exposing adjacent heap memory...