Apache James Mime4J before 0.8.15 allows denial of service upon MIME parsing
Original title: CVE-2026-85108: Apache James MIME4J: Denial of service due to Allocation of Resources Without Limits or Throttling
Upgrade to Mime4J 0.8.15 fixes the denial of service issue in Apache James
Allocation of Resources Without Limits or Throttling in Apache James Mime4J library prior version 0.8.15 allows Denial of Service upon parsing Mime messages. The issue affects Mime4J Core and Dom before 0.8.15. Users are recommended to upgrade to version 0.8.15.
- Mime4J Core and Dom before 0.8.15 affected
- Fixed in Mime4J 0.8.15
- Affects Apache James
Impact: Denial of service upon parsing Mime messages
| Product | Affected | Fixed in |
|---|---|---|
| apache-mime4j-core | before 0.8.15 | 0.8.15 |
- 1.Upgrade to version 0.8.15
- CVEs
- CVE-2026-85108
- Vendors
- Apache
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-85108 | Denial of Service in Apache James Mime4J before 0.8.15 | 7.5 | — |
From the original article
Posted by Benoit Tellier on Nov 06 Severity: important Affected versions: - Apache James Mime4J Core (org. apache. james:apache-mime4j-core) before 0.
seclists.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.