VYPR

MIME::Parser

by Perl Foundation

CVEs (2)

  • CVE-2026-116273Oct 28, 2026
    risk 0.00cvss —epss 0.00

    MIME::Parser versions before 5.521 for Perl set no limit on the number of message parts by default, allowing memory exhaustion. The max_parts option defaulted to -1, which disables the limit, so a parser created with default settings builds an entity for every part however many…

  • CVE-2026-116267Oct 28, 2026
    risk 0.00cvss —epss 0.00

    MIME::Parser versions before 5.521 for Perl allow memory exhaustion via indented error messages from a truncated, deeply nested message. Each stored parser diagnostic is indented by three spaces per nesting level. When a message nested N levels deep ends without its closing…