org.apache.james:james-server vulnerabilities

CVEs whose affected-version data names the org.apache.james:james-server package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-85111High· 8.7

today

Apache James: Denial of service upon MIME parsing

Allocation of Resources Without Limits or Throttling in Apache James Mime4J library prior version 0.8.15 allows Denial of Service upon parsing Mime messages. Users are recommended to upgrade to Apache James server 3.9.1 that relies on fi…

▾ TwilightApache Software Foundation · Apache Jamesvia CVEORG