/ 
Email-MIME-1.862
/ Email::MIME::Header
Security Advisories (1)
CVE-2024-4140 (2024-05-02)

An excessive memory use issue (CWE-770) exists in Email-MIME, before version 1.954, which can cause denial of service when parsing multipart MIME messages. The patch set (from 2020 and 2024) limits excessive depth and the total number of parts.

NAME

Email::MIME::Header - the header of a MIME message

DESCRIPTION

This object behaves like a standard Email::Simple header, with the following changes:

  • the header method automatically decodes encoded headers if possible

  • the header_raw method returns the raw header; (read only for now)

  • stringification uses header_raw rather than header