3 matches found
OESA-2025-2345 apache-mime4j security update
Java stream based MIME message parser. Security Fixes: A vulnerability was found in Apache James MIME4J up to 0.8.8. It has been rated as problematic.Using CWE to declare the problem leads to CWE-200. The product exposes sensitive information to an actor that is not explicitly authorized to have...
OESA-2024-1475 apache-mime4j security update
Java stream based MIME message parser. Security Fixes: Improper input validation allows for header injection in MIME4J library when using MIME4J DOM for composing message. This can be exploited by an attacker to add unintended headers to MIME messages. CVE-2024-21742...
be.jidoka:jdk-keycloak-admin (>=2.0.0 <=2.5.0), cn.sparrowmini:sparrow-keycloak-adapter (>=0.0.1 <=0.0.2) +533 more potentially affected by CVE-2022-45787 via org.apache.james:apache-mime4j-storage (>=0.7 <=0.8.8)
org.apache.james:apache-mime4j-storage MAVEN version =0.7, =2.0.0, =0.0.1, =1.0, =0.5.8, =8.0.0, =1.7.0, =1.7.0, =1.7.0, =1.7.0, =1.7.0, =1.7.0, =1.7.0, =1.7.0, =1.7.0, =1.7.0, =2.0.0 and more Source cves: CVE-2022-45787 Source advisory: OSV:GHSA-Q84X-3476-8FF2...