What is GHSA-4fm7-jr3j-gv7f?

GHSA-4fm7-jr3j-gv7f is a security advisory published by GitHub Security Advisories with High severity. Allocation of Resources Without Limits or Throttling in Apache James Mime4J library prior version...

Which CVE IDs does GHSA-4fm7-jr3j-gv7f cover?

GHSA-4fm7-jr3j-gv7f covers the following CVE IDs: CVE-2026-85111. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-4fm7-jr3j-gv7fHigh

Allocation of Resources Without Limits or Throttling in Apache James Mime4J library prior version...

Vendor

GitHub Security Advisories

Published

November 6, 2026

Last Modified

November 6, 2026

🔗 CVE IDs covered (1)

CVE-2026-85111 →

📋 Description

Allocation of Resources Without Limits or Throttling in Apache James Mime4J library prior version 0.8.15 allows Denial of Service upon parsing Mime messages. Users are recommended to upgrade to Apache James server 3.9.1 that relies on fixed MIME4J 0.8.15 which addresses the issue.

See CVE-2026-85108 in Apache James MIME4J library.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-85111
https://lists.apache.org/thread.html/j1bql696qvg935lp8zo0m626jp9n0h8q
https://www.cve.org/CVERecord?id=CVE-2026-85108
https://github.com/advisories/GHSA-4fm7-jr3j-gv7f