RHLW-2026-C45D2A64E2C0626E Lightwell Security Advisory: android-mail 1.6.7.rhlw-00001

Red Hat Lightwell has released com.sun.mail:android-mail 1.6.7.rhlw-00001 with a backported security fix. CVE-2025-7962: In Jakarta Mail versions prior to 2.0.2 it is possible to perform an SMTP Injection by utilizing the \r and \n UTF-8 characters to separate different messages. This patched...

RHLW-2026-49443DA84312BD4D Lightwell Security Advisory: jakarta.mail 1.6.7.rhlw-00001

Red Hat Lightwell has released com.sun.mail:jakarta.mail 1.6.7.rhlw-00001 with a backported security fix. CVE-2025-7962: In Jakarta Mail versions prior to 2.0.2 it is possible to perform an SMTP Injection by utilizing the \r and \n UTF-8 characters to separate different messages. This patched...

CVE-2026-52731

ZEBRA is a Zcash node written entirely in Rust. Prior to 4.5.0, an attacker authenticated to an enabled Zebra RPC endpoint can terminate zebrad by supplying a getblocktemplate LongPollId containing multi-byte UTF-8 characters. In zebra-rpc/src/methods/types/longpoll.rs, LongPollId::fromstr...

EUVD-2014-9307

Malware in sbrugna...

EUVD-2010-3590

Malware in sbrugna...

EUVD-2010-4732

Malware in sbrugna...

EUVD-2007-2472

Malware in sbrugna...

EUVD-2005-2103

Malware in sbrugna...

EUVD-2009-1047

Malware in sbrugna...

EUVD-2017-8618

Malware in sbrugna...

EUVD-2025-8086

Malicious code in bioql PyPI...

Amazon Linux 2023 : jakarta-mail (ALAS2023-2025-1117)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-1117 advisory. In Jakarta Mail 2.2 it is possible to preform a SMTP Injection by utilizing the \r and \n UTF-8 characters to separate different messages. CVE-2025-7962 Tenable has extracted the preceding description...

Jakarta Mail vulnerable to SMTP Injection

In Jakarta Mail 2.2 it is possible to preform a SMTP Injection by utilizing the \r and \n UTF-8 characters to separate different messages...

CVE-2025-7962

In Jakarta Mail versions prior to 2.0.2 it is possible to perform an SMTP Injection by utilizing the \r and \n UTF-8 characters to separate different messages...

CVE-2025-7962

In Jakarta Mail versions prior to 2.0.2 it is possible to perform an SMTP Injection by utilizing the \r and \n UTF-8 characters to separate different messages...

CVE-2025-7962

In Jakarta Mail versions prior to 2.0.2 it is possible to perform an SMTP Injection by utilizing the \r and \n UTF-8 characters to separate different messages...

CVE-2025-7962

In Jakarta Mail versions prior to 2.0.2 it is possible to perform an SMTP Injection by utilizing the \r and \n UTF-8 characters to separate different messages...

CVE-2025-7962

CVE-2025-7962 affects Jakarta Mail 2.0.2 and enables SMTP injection by CRLF-based message separation. IBM connected advisories confirm the issue in IBM WebSphere Liberty-backed deployments and IBM PowerVM Novalink/PowerVC Novalink, with remediation by upgrading affected products to specific fixed...

CVE-2025-27837

An issue was discovered in Artifex Ghostscript before 10.05.0. Access to arbitrary files can occur through a truncated path with invalid UTF-8 characters, for base/gpmswin.c and base/winrtsup.cpp...

CVE-2025-27837

An issue was discovered in Artifex Ghostscript before 10.05.0. Access to arbitrary files can occur through a truncated path with invalid UTF-8 characters, for base/gpmswin.c and base/winrtsup.cpp...