/ 
Email-MIME-1.910
⭐ Starred 20
/ Email::MIME::Header
Security Advisories (1)
CVE-2024-4140 (2024-05-02)

An excessive memory use issue (CWE-770) exists in Email-MIME, before version 1.954, which can cause denial of service when parsing multipart MIME messages. The patch set (from 2020 and 2024) limits excessive depth and the total number of parts.

NAME

Email::MIME::Header - the header of a MIME message

DESCRIPTION

This object behaves like a standard Email::Simple header, with the following changes:

  • the header method automatically decodes encoded headers if possible

  • the header_raw method returns the raw header; (read only for now)

  • stringification uses header_raw rather than header

Note that header_set does not do encoding for you, and expects an encoded header. Thus, header_set round-trips with header_raw, not header! Be sure to properly encode your headers with Encode::encode('MIME-Header', $value) before passing them to header_set.

Alternately, if you have Unicode (character) strings to set in headers, use the header_str_set method.

COPYRIGHT

This software is copyright (c) 2004 by Simon Cozens.

This is free software; you can redistribute it and/or modify it under the same terms as perl itself.