6 matches found
EUVD-2026-116903
zbateson mail-mime-parser before 3.0.9 and 4.x before 4.0.6 contains a CRLF header injection vulnerability in message-building helpers that fail to strip CR and LF characters. Attackers supplying crafted MIME type, charset, encoding, micalg, or protocol values can inject extra header lines such a...
CVE-2026-121946
The zbateson mail-mime-parser library is vulnerable to a CRLF header injection vulnerability in versions before 3.0.9 and 4.x before 4.0.6 . The root cause is that message-building helpers fail to strip CR and LF characters from input. An attacker providing crafted values for MIME type , charset ...
CVE-2026-121946 zbateson mail-mime-parser before 3.0.9 and 4.x before 4.0.6 CRLF Header Injection via Message Builders
zbateson mail-mime-parser before 3.0.9 and 4.x before 4.0.6 contains a CRLF header injection vulnerability in message-building helpers that fail to strip CR and LF characters. Attackers supplying crafted MIME type, charset, encoding, micalg, or protocol values can inject extra header lines such a...
PT-2026-136966
zbateson mail-mime-parser before 3.0.9 and 4.x before 4.0.6 contains a CRLF header injection vulnerability in message-building helpers that fail to strip CR and LF characters. Attackers supplying crafted MIME type, charset, encoding, micalg, or protocol values can inject extra header lines such a...
CVE-2026-121946: zbateson mail-mime-parser: zbateson mail-mime-parser before 3.0.9 and 4.x before 4.0.6 contains a CRLF header injection vulnerability in…
zbateson mail-mime-parser before 3.0.9 and 4.x before 4.0.6 contains a CRLF header injection vulnerability in message-building helpers that fail to strip CR and LF characters. Attackers supplying crafted MIME type, charset, encoding, micalg, or protocol values can inject extra header lines such a...
PT-2026-98219
Name of the Vulnerable Software and Affected Versions zbateson/mail-mime-parser versions prior to 3.0.6 zbateson/mail-mime-parser versions prior to 4.0.2 Description CRLF carriage-return / line-feed header injection occurs when the library is used to build or forward MIME messages with an...