Lucene search
+L

1 matches found

osv-ghsa
osv-ghsa
•added 2026/09/24 7:46 p.m.•12 views

GHSA-36H5-QG4P-Q2QF zbateson/mail-mime-parser has CRLF header injection via attachment filename

Impact A CRLF carriage-return / line-feed header injection affecting any application that uses this library to build or forward MIME messages with an attacker-influenced attachment filename. Attachment filenames are interpolated into the Content-Type and Content-Disposition header values without...

7.2CVSS5.9AI score0.00178EPSS
SaveExploits0References7
Rows per page
Query Builder