Security · High impactFan score 20 · Tier C
CVE-2026-85108: Apache James MIME4J: Denial of service due to Allocation of Resources Without Limits or Throttling
The Brief
- CVE-2026-85108 is a denial-of-service flaw caused by allocation of resources without limits or throttling in Apache James MIME4J.
- Affected are Apache James Mime4J Core and Mime4J Dom versions before 0.8.15.
- The advisory was posted to oss-sec on 2026-11-06 by Benoit Tellier and rated important.
Why it matters
Applications that parse MIME messages with Mime4J Core or Dom before 0.8.15 can be driven into resource exhaustion, so teams using these libraries should upgrade.
Who’s affected
- Projects using Apache Mime4J Core before 0.8.15
- Projects using Apache Mime4J Dom before 0.8.15
What to do
- Upgrade apache-mime4j-core and apache-mime4j-dom to 0.8.15 or later
- Apache Mime4J 0.8.15
- CVE-2026-85108
- #security
- #cve
- #mime
- #denial-of-service
- #apache-james
- #vulnerability
Posted by Benoit Tellier on Nov 06 Severity: important Affected versions: - Apache James Mime4J Core (org.apache.james:apache-mime4j-core) before 0.8.15 - Apache James Mime4J Dom (org.apache.james:apache-mime4j-dom) before 0.8.15 Description: Allocation of Resources Without…
Timeline
Vulnerability disclosed on oss-sec
Open Source Security
CVE-2026-85108: Apache James MIME4J: Denial of service due to Allocation of Resources Without Limits or Throttling