Skip to content
Threat Feed
Subscribe

Product

Mail-Mime-Parser (2.0.0-3.0.5, 4.0.0-4.0.1)

1 brief RSS
high threat

CRLF Header Injection Vulnerability in mail-mime-parser

The zbateson/mail-mime-parser library is vulnerable to CRLF header injection (CVE-2026-61815), allowing attackers to inject arbitrary email headers such as Bcc for silent data exfiltration.

exploited mail-mime-parser +1 denial-of-service vulnerability php
2t 1c 1i