Product
The zbateson mail-mime-parser library contains a CRLF header injection vulnerability in message-building helpers that fail to strip CR and LF characters.