CRLF Injection

Overview Affected versions of this package are vulnerable to CRLF Injection via the getFilename process. An attacker can inject arbitrary headers into MIME messages by supplying a crafted attachment filename containing carriage return and line feed characters, which are not properly sanitized...