CVE-2026-102471

In Eclipse Vert.x versions 4.0.0, 4.5.34 or 5.0.0,5.0.12 or 5.1.0,5.1.9 or 5.2.0, 5.2.0, the vertx-mail-client does not sanitize CR \r or LF \n characters in user-supplied email header names and values before writing them into the SMTP DATA section. A CR/LF sequence embedded in a name or value...

CVE-2026-102471 CRLF header injection in vertx-mail-client allows manipulation of outgoing SMTP messages

In Eclipse Vert.x versions 4.0.0, 4.5.34 or 5.0.0,5.0.12 or 5.1.0,5.1.9 or 5.2.0, 5.2.0, the vertx-mail-client does not sanitize CR \r or LF \n characters in user-supplied email header names and values before writing them into the SMTP DATA section. A CR/LF sequence embedded in a name or value...

EUVD-2026-101577

In Eclipse Vert.x versions 4.0.0, 4.5.34 or 5.0.0,5.0.12 or 5.1.0,5.1.9 or 5.2.0, 5.2.0, the vertx-mail-client does not sanitize CR \r or LF \n characters in user-supplied email header names and values before writing them into the SMTP DATA section. A CR/LF sequence embedded in a name or value...

CVE-2026-102471 CRLF header injection in vertx-mail-client allows manipulation of outgoing SMTP messages

In Eclipse Vert.x versions 4.0.0, 4.5.34 or 5.0.0,5.0.12 or 5.1.0,5.1.9 or 5.2.0, 5.2.0, the vertx-mail-client does not sanitize CR \r or LF \n characters in user-supplied email header names and values before writing them into the SMTP DATA section. A CR/LF sequence embedded in a name or value...

CVE-2026-102471

The io.vertx:vertx-mail-client component in Eclipse Vert.x versions [4.0.0, 4.5.34] , [5.0.0, 5.0.12] , [5.1.0, 5.1.9] , and [5.2.0, 5.2.0] is vulnerable to CRLF header injection . The root cause is the failure to sanitize CR () and LF () characters in user-supplied email header names, values, an...

CVE-2026-102471 CRLF header injection in vertx-mail-client allows manipulation of outgoing SMTP messages

In Eclipse Vert.x versions 4.0.0, 4.5.34 or 5.0.0,5.0.12 or 5.1.0,5.1.9 or 5.2.0, 5.2.0, the vertx-mail-client does not sanitize CR \r or LF \n characters in user-supplied email header names and values before writing them into the SMTP DATA section. A CR/LF sequence embedded in a name or value...

CVE-2026-102471: Improper Neutralization of CRLF Sequences

In Eclipse Vert.x versions 4.0.0, 4.5.34 or 5.0.0,5.0.12 or 5.1.0,5.1.9 or 5.2.0, 5.2.0, the vertx-mail-client does not sanitize CR \r or LF \n characters in user-supplied email header names and values before writing them into the SMTP DATA section. A CR/LF sequence embedded in a name or value...

Code-Projects Chamber of Commerce Membership Management System: Command Injection Vulnerability

Code-Projects Chamber of Commerce Membership Management System is an open-source membership management system developed by Code-Projects. Version 1.0 of the Code-Projects Chamber of Commerce Membership Management System has a command injection vulnerability. This vulnerability arises from imprope...

PT-2024-40624

Name of the Vulnerable Software and Affected Versions: Poco Net affected versions not specified Description: The issue is related to a crash that occurs due to a segmentation fault on an unknown address. The crash involves the std:: 1::ios base destructor and the...

poco:mail_message_fuzzer: Segv on unknown address in std::__1::ios_base::~ios_base

Project: https://github.com/pocoproject/poco.git Detailed Report: https://oss-fuzz.com/testcase?key=4995747949379584 Project: poco Fuzzing Engine: afl Fuzz Target: mailmessagefuzzer Job Type: aflasanpoco Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State:...

Elm 2.4 'filter' Arbitrary Mail Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1802/info Elm is a popular Unix mail client. A vulnerability exists in Elm's 'filter' utility which can grant an attacker access to any user's mail spool. By exploiting a race condition which exists in the creation of...