Improper Neutralization

Overview org.eclipse.angus:angus-mail is an Angus Mail Provider. Affected versions of this package are vulnerable to Improper Neutralization via the handling of SMTP message input. An attacker can inject arbitrary SMTP commands by supplying specially crafted input containing carriage return and...

ai.mindconnect:mc-mail-imap (0.8.4), app.tozzi:pec-parser (>=5.0.0, <=5.1.2) +2253 more potentially affected by CVE-2025-7962 via org.eclipse.angus:angus-mail (>=2.0.0, <=2.0.3)

org.eclipse.angus:angus-mail MAVEN version =2.0.0, =5.0.0, =1.0.1, =1.0.1-rc14, =1.1.16, =1.0.1-rc14, =1.1.17, =29.v7c3891a434c3, =7.6.0, =7.6.0, =7.6.0, =7.6.0, =7.6.0, =7.6.0, =8.2.2 and more Source cves: CVE-2025-7962 Source advisory: SNYK:JAVA-ORGECLIPSEANGUS-12239873...

Improper Neutralization

Overview Affected versions of this package are vulnerable to Improper Neutralization via the handling of SMTP message input. An attacker can inject arbitrary SMTP commands by supplying specially crafted input containing carriage return and line feed characters. Remediation Upgrade...

org.eclipse.angus:angus-mail (1.0.0-m2) potentially affected by CVE-2025-7962 via org.eclipse.angus:smtp (1.0.0-m2)

org.eclipse.angus:smtp MAVEN version 1.0.0-m2 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.angus:smtp and may be impacted: - org.eclipse.angus:angus-mail 1.0.0-m2 Source cves: CVE-2025-7962 Source advisory: OSV:GHSA-9342-92GG-6V29...

Jakarta Mail vulnerable to SMTP Injection

In Jakarta Mail 2.2 it is possible to preform a SMTP Injection by utilizing the \r and \n UTF-8 characters to separate different messages...

GHSA-9342-92GG-6V29 Jakarta Mail vulnerable to SMTP Injection

In Jakarta Mail 2.2 it is possible to preform a SMTP Injection by utilizing the \r and \n UTF-8 characters to separate different messages...

org.eclipse.angus:angus-mail (1.0.0) potentially affected by CVE-2025-7962 via org.eclipse.angus:smtp (1.0.0)

org.eclipse.angus:smtp MAVEN version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.angus:smtp and may be impacted: - org.eclipse.angus:angus-mail 1.0.0 Source cves: CVE-2025-7962 Source advisory: OSV:GHSA-9342-92GG-6V29...

CVE-2025-7962

In Jakarta Mail versions prior to 2.0.2 it is possible to perform an SMTP Injection by utilizing the \r and \n UTF-8 characters to separate different messages...

DEBIAN-CVE-2025-7962

In Jakarta Mail versions prior to 2.0.2 it is possible to perform an SMTP Injection by utilizing the \r and \n UTF-8 characters to separate different messages...

UBUNTU-CVE-2025-7962

In Jakarta Mail versions prior to 2.0.2 it is possible to perform an SMTP Injection by utilizing the \r and \n UTF-8 characters to separate different messages...

CVE-2025-7962

In Jakarta Mail versions prior to 2.0.2 it is possible to perform an SMTP Injection by utilizing the \r and \n UTF-8 characters to separate different messages...

CVE-2025-7962

In Jakarta Mail versions prior to 2.0.2 it is possible to perform an SMTP Injection by utilizing the \r and \n UTF-8 characters to separate different messages...

CVE-2025-7962

In Jakarta Mail versions prior to 2.0.2 it is possible to perform an SMTP Injection by utilizing the \r and \n UTF-8 characters to separate different messages...

CVE-2025-7962

CVE-2025-7962 affects Jakarta Mail 2.0.2 and enables SMTP injection by CRLF-based message separation. IBM connected advisories confirm the issue in IBM WebSphere Liberty-backed deployments and IBM PowerVM Novalink/PowerVC Novalink, with remediation by upgrading affected products to specific fixed...

CVE-2025-7962

In Jakarta Mail versions prior to 2.0.2 it is possible to perform an SMTP Injection by utilizing the \r and \n UTF-8 characters to separate different messages...

CVE-2025-7962

In Jakarta Mail versions prior to 2.0.2 it is possible to perform an SMTP Injection by utilizing the \r and \n UTF-8 characters to separate different messages...

CVE-2025-7962

In Jakarta Mail versions prior to 2.0.2 it is possible to perform an SMTP Injection by utilizing the \r and \n UTF-8 characters to separate different messages...

ai.mindconnect:mc-mail-imap (0.8.4), app.tozzi:pec-parser (>=5.0.0, <=5.1.2) +2420 more potentially affected by CVE-2025-7962 via org.eclipse.angus:angus-mail (>=1.0.0-m1, <=2.0.3)

org.eclipse.angus:angus-mail MAVEN version =1.0.0-m1, =5.0.0, =1.0.1, =1.0.1-rc14, =1.1.16, =1.0.1-rc14, =1.1.17, =29.v7c3891a434c3, =2.3.0, =7.6.0, =7.6.0, =7.6.0, =7.6.0, =7.6.0, =8.2.2 and more Source cves: CVE-2025-7962 Source advisory: MEND:CVE-2025-7962...

CVE-2025-7393

Improper Restriction of Excessive Authentication Attempts vulnerability in Drupal Mail Login allows Brute Force.This issue affects Mail Login: from 3.0.0 before 3.2.0, from 4.0.0 before 4.2.0...

CVE-2025-7393

The Drupal Mail Login module is vulnerable to an Improper Restriction of Excessive Authentication Attempts vulnerability, which allows for Brute Force attacks. The root cause is that the module's built-in protections against brute force attacks on the login form were incomplete, potentially allow...