High severityNVD Advisory· Published Nov 6, 2026

CVE-2026-85111

Description

Allocation of Resources Without Limits or Throttling in Apache James Mime4J library prior version 0.8.15 allows Denial of Service upon parsing Mime messages. Users are recommended to upgrade to Apache James server 3.9.1 that relies on fixed MIME4J 0.8.15 which addresses the issue.

See CVE-2026-85108 in Apache James MIME4J library.

Affected products

Apache/Mime4Jllm-create
Range: <0.8.15
Apache/Jamesllm-fuzzy
Range: >=3.9.1

Patches

Vulnerability mechanics

References

lists.apache.org/thread.html/j1bql696qvg935lp8zo0m626jp9n0h8qnvd
www.cve.org/CVERecordnvd

News mentions

No linked articles in our index yet.

cvss	0.455
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000