| Package | Affected versions | Patched versions |
|---|---|---|
| org.apache.james:james-server-jmap-draft | ≥ 3.8.0, < 3.8.2< 3.7.6 | 3.8.23.7.6 |
| james server | ≥ 3.8.0, < 3.8.2< 3.7.6 | 3.8.23.7.6 |
Apache James server JMAP HTML to text plain implementation in versions below 3.8.2 and 3.7.6 is subject to unbounded memory consumption that can result in a denial of service.
Users are recommended to upgrade to version 3.7.6 and 3.8.2, which fix this issue.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free