zbateson/mail-mime-parser has uncontrolled resource consumption (CPU/memory DoS) parsing untrusted MIME

Impact An uncontrolled resource consumption / algorithmic complexity vulnerability affecting any application that parses untrusted email with this library. Three independent parsing paths are super-linear in cost, so a byte-size cap on the caller side does not bound the work done. A crafted messa...

PT-2026-98220

Name of the Vulnerable Software and Affected Versions zbateson/mail-mime-parser versions 2.0.0 through 3.0.5 zbateson/mail-mime-parser versions 4.0.0 through 4.0.1 Description An uncontrolled resource consumption and algorithmic complexity issue affects applications parsing untrusted emails. Thre...