Apache James

Search everything

Mentions · 7d3
Mentions · 30d3
All mentions3
First seenNov 6, 2026
Last mentioned5d ago

Timeline

3 articles · newest first

Apache James before 3.9.1 allows denial of service upon MIME parsing

Upgrade to Apache James 3.9.1 or Mime4J 0.8.15 fixes the MIME parsing denial of service issue

oss-securityNov 6, 17:03 UTC · 5d agoVulnerability 2 sourcesCVE-2026-85111

Apache James WebAdmin exposed without authentication on official Docker default (CVE-2026-74756)

WebAdmin is exposed without authentication in the official Docker image for Apache James.

oss-securityNov 6, 16:55 UTC · 5d agoVulnerabilityCVE-2026-74756

Apache James: SASL OAUTHBEARER do not validate aud in JWT payload if misconfigured (CVE-2025-66621)

SASL OAuthBearer fails to validate AUD claim in JWT payload when not configured.

oss-securityNov 6, 16:52 UTC · 5d agoVulnerabilityCVE-2025-666211 · 1 read

Related CVEs

by mentions

CVE-2026-747569.1
Unauthenticated WebAdmin exposure in Apache James Docker
published 5d agoApache James
CVE-2026-851118.7
Resource Exhaustion DoS in Apache James Mime4J library before 0.8.15
published 5d agoApache Mime4J
CVE-2025-66621—
JWT AUD claim validation flaw in Apache James SASL OAuthBearer
published 5d agoApache James

Appears with

Apachevendor · 3

Entities are extracted by the model from each article. First seen Nov 6, 2026, last mentioned 5d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.