/ 
Email-MIME-1.921
River stage three • 70 direct dependents • 184 total dependents
⭐ Starred 20 GitHub stars
/ Email::MIME::Header
Security Advisories (1)
CVE-2024-4140 (2024-05-02)

An excessive memory use issue (CWE-770) exists in Email-MIME, before version 1.954, which can cause denial of service when parsing multipart MIME messages. The patch set (from 2020 and 2024) limits excessive depth and the total number of parts.

NAME

Email::MIME::Header - the header of a MIME message

VERSION

version 1.921

DESCRIPTION

This object behaves like a standard Email::Simple header, with the following changes:

  • the header method automatically decodes encoded headers if possible

  • the header_raw method returns the raw header; (read only for now)

  • stringification uses header_raw rather than header

Note that header_set does not do encoding for you, and expects an encoded header. Thus, header_set round-trips with header_raw, not header! Be sure to properly encode your headers with Encode::encode('MIME-Header', $value) before passing them to header_set.

Alternately, if you have Unicode (character) strings to set in headers, use the header_str_set method.

AUTHORS

  • Ricardo SIGNES <rjbs@cpan.org>

  • Casey West <casey@geeknest.com>

  • Simon Cozens <simon@cpan.org>

COPYRIGHT AND LICENSE

This software is copyright (c) 2004 by Simon Cozens and Casey West.

This is free software; you can redistribute it and/or modify it under the same terms as the Perl 5 programming language system itself.