Denial of Service Vulnerability in Apache James Mime4J Library
CVE-2026-85108

Currently unrated

Key Information:

Vendor

Apache
Status
Apache James Mime4j Core
Apache James Mime4j Dom
Vendor
CVE Published:
6 November 2026

What is CVE-2026-85108?

The Apache James Mime4J library prior to version 0.8.15 contains a vulnerability that allows for Denial of Service (DoS) attacks through the improper handling of Mime message parsing. This resource allocation issue can be exploited to overwhelm the system, resulting in service disruptions. Users are strongly advised to upgrade to version 0.8.15 or later, which introduces critical limitations and enhanced defaults, mitigating this vulnerability.

Affected Version(s)

Apache James Mime4J Core 0 < 0.8.15

Apache James Mime4J Dom 0 < 0.8.15

References

https://lists.apache.org/thread.html/twktm00gmc8lt7tlqrrj...
vendor-advisory

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Mike Read
.