spamscanner

A spam filter for Node.js, the command line and mail servers. It catches spam, phishing, scams and malware in any language, explains every decision, and can ask a language model about close calls. spamscanner.net · Getting started · Documentation Features A classifier that reads every language...

CVE-2026-63341

Aedes is an MQTT broker that can run on any stream server. Prior to 1.1.1, the MQTT broker does not bound topic depth or structural complexity before passing topics through mqemitter into qlobber. A PUBLISH, SUBSCRIBE, or registered Will message containing an excessively deep topic can reach...

PT-2026-134237

Name of the Vulnerable Software and Affected Versions Aedes versions prior to 1.1.1 Description The MQTT broker fails to limit topic depth or structural complexity before processing topics through mqemitter into qlobber. A PUBLISH, SUBSCRIBE, or registered Will message with an excessively deep...

SUSE CVE-2026-116270

MIME::Words versions before 5.521 for Perl allow memory exhaustion via repeated "=?" sequences in decodemimewords. For each "=?" that does not start a complete encoded word, decodemimewords appends an error message containing the whole input string to $@. A boundary of 8,000 "=?" pairs 16,000 byt...

CVE-2026-116270

MIME::Words versions before 5.521 for Perl allow memory exhaustion via repeated "=?" sequences in decodemimewords. For each "=?" that does not start a complete encoded word, decodemimewords appends an error message containing the whole input string to $@. A boundary of 8,000 "=?" pairs 16,000 byt...

DEBIAN-CVE-2026-116270

MIME::Words versions before 5.521 for Perl allow memory exhaustion via repeated "=?" sequences in decodemimewords. For each "=?" that does not start a complete encoded word, decodemimewords appends an error message containing the whole input string to $@. A boundary of 8,000 "=?" pairs 16,000 byt...

UBUNTU-CVE-2026-116270

MIME::Words versions before 5.521 for Perl allow memory exhaustion via repeated "=?" sequences in decodemimewords. For each "=?" that does not start a complete encoded word, decodemimewords appends an error message containing the whole input string to $@. A boundary of 8,000 "=?" pairs 16,000 byt...

CVE-2026-116270 MIME::Words versions before 5.521 for Perl allow memory exhaustion via repeated "=?" sequences in decode_mimewords

MIME::Words versions before 5.521 for Perl allow memory exhaustion via repeated "=?" sequences in decodemimewords. For each "=?" that does not start a complete encoded word, decodemimewords appends an error message containing the whole input string to $@. A boundary of 8,000 "=?" pairs 16,000 byt...

CVE-2026-116270

MIME::Words versions before 5.521 for Perl allow memory exhaustion via repeated "=?" sequences in decodemimewords. For each "=?" that does not start a complete encoded word, decodemimewords appends an error message containing the whole input string to $@. A boundary of 8,000 "=?" pairs 16,000 byt...

CVE-2026-116270

MIME::Words versions before 5.521 for Perl allow memory exhaustion via repeated "=?" sequences in decodemimewords. For each "=?" that does not start a complete encoded word, decodemimewords appends an error message containing the whole input string to $@. A boundary of 8,000 "=?" pairs 16,000 byt...

EUVD-2026-112303

MIME::Words versions before 5.521 for Perl allow memory exhaustion via repeated "=?" sequences in decodemimewords. For each "=?" that does not start a complete encoded word, decodemimewords appends an error message containing the whole input string to $@. A boundary of 8,000 "=?" pairs 16,000 byt...

CVE-2026-116270

The MIME::Words Perl module (versions before 5.521 ) is vulnerable to memory exhaustion due to the way it handles malformed encoded word sequences. Specifically, the decode_mimewords function appends an error message containing the entire input string to the $@ variable for every "=?" sequence th...

mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

A flaw was found in the Golang MIME Multipurpose Internet Mail Extensions package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service...

CVE-2026-116270

MIME::Words versions before 5.521 for Perl allow memory exhaustion via repeated "=?" sequences in decodemimewords. For each "=?" that does not start a complete encoded word, decodemimewords appends an error message containing the whole input string to $@. A boundary of 8,000 "=?" pairs 16,000 byt...

CVE-2026-116270: Inefficient Algorithmic Complexity

MIME::Words versions before 5.521 for Perl allow memory exhaustion via repeated "=?" sequences in decodemimewords. For each "=?" that does not start a complete encoded word, decodemimewords appends an error message containing the whole input string to $@. A boundary of 8,000 "=?" pairs 16,000 byt...

PT-2026-129084

Name of the Vulnerable Software and Affected Versions MIME::Words versions prior to 5.521 Description A memory exhaustion issue exists in the decode mimewords function. When the function encounters repeated "=?" sequences that do not start a complete encoded word, it appends an error message...

CVE-2026-116270

MIME::Words versions before 5.521 for Perl allow memory exhaustion via repeated "=?" sequences in decodemimewords. For each "=?" that does not start a complete encoded word, decodemimewords appends an error message containing the whole input string to $@. A boundary of 8,000 "=?" pairs 16,000 byt...

mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

A flaw was found in the Golang MIME Multipurpose Internet Mail Extensions package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service...

mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

A flaw was found in the Golang MIME Multipurpose Internet Mail Extensions package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service...

CVE-2026-115775

The Twisted event-based framework (Python 3.6+) is vulnerable to an unauthenticated Remote Denial of Service in the twisted.words.xish.domish ExpatElementStream parser. Prior to version 26.10.0rc1 , an attacker can keep a container element open and continuously add child elements. Because the par...