James

Search everything

Mentions · 7d3
Mentions · 30d3
All mentions3
First seenNov 6, 2026
Last mentioned5d ago

Timeline

3 articles · newest first

Apache James SSRF filter bypass in JMAP web-push client

Apache James server allows bypass of the SSRF filter in its JMAP PushSubscription web-push client.

oss-securityNov 6, 16:59 UTC · 5d agoVulnerability 2 sourcesCVE-2026-76171

Apache James ManageSieve path traversal vulnerability

Apache James before 3.9.1 allows cross-user path traversal in ManageSieve file implementation, enabling arbitrary SIEVE scripts.

oss-securityNov 6, 16:57 UTC · 5d agoVulnerabilityCVE-2026-76168

CVE-2026-49939: Apache James JMAP ACL bypass

JMAP protocol fails to respect negative IMAP ACL rules, letting users administer folders despite denials; upgrade to 3.9.1 required.

oss-securityNov 6, 16:54 UTC · 5d agoVulnerability 2 sourcesCVE-2026-49939

Related CVEs

by mentions

CVE-2026-761689.8
Path traversal in Apache James SieveFileRepository before 3.9.1
published 5d agoApache James
CVE-2026-761719.1
SSRF bypass in Apache James JMAP webPush before 3.9.1
published 5d agoApache James
CVE-2026-499397.5
JMAP ACL bypass in Apache James before 3.9.1
published 5d agoApache James

Appears with

Apachevendor · 3

Entities are extracted by the model from each article. First seen Nov 6, 2026, last mentioned 5d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.