Skip to content
Threat Feed
Subscribe

Vendor

Zbateson

2 briefs RSS
high advisory

zbateson mail-mime-parser: CRLF header injection (CVE-2026-121946)

The zbateson mail-mime-parser library contains a CRLF header injection vulnerability in message-building helpers that fail to strip CR and LF characters.

mail-mime-parser
1c
high threat

CRLF Header Injection Vulnerability in mail-mime-parser

The zbateson/mail-mime-parser library is vulnerable to CRLF header injection (CVE-2026-61815), allowing attackers to inject arbitrary email headers such as Bcc for silent data exfiltration.

exploited mail-mime-parser +1 denial-of-service vulnerability php
2t 1c 1i