jakarta_mail vulnerabilities

CVEs whose affected-version data names the jakarta_mail package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2025-7962High· 7.5

In Jakarta Mail versions prior to 2.0.2 it is possible to perform an SMTP Injection by utilizing the \r and \n UTF-8 characters to separate different messages.

In Jakarta Mail versions prior to 2.0.2 it is possible to perform an SMTP Injection by utilizing the \r and \n UTF-8 characters to separate different messages.

▾ Twilighteclipse · jakarta_mailEPSS 0.77%via NVD

jakarta_mail vulnerabilities (CVEs) · VulnSea