porro
Start free trial
Product
Needs attention Checks Setup Updates Alerts Tour the product →
Connectors
Laravel Filament Statamic Craft CMS JavaScript One-click install WordPress · soon All connectors →
Security Pricing

Free tools and reference

Lock-file checker Advisories End of life Blog Log in

Advisories  /  composer  /  zbateson

composer

zbateson/mail-mime-parser

Security advisories for zbateson/mail-mime-parser, newest first. 2 known, all fixed. If you’re on 4.0.2 or later, none of them affect you.

RSS feed Check your lock file →

Latest version

4.0.8

Advisories

2 · 0 unfixed

Last advisory

24 Sep 2026

Safe from

4.0.2

2 advisories · newest first

HIGH7.2 24 Sep 2026

zbateson/mail-mime-parser has CRLF header injection via attachment filename

GHSA-36h5-qg4p-q2qf · CVE-2026-61815

Affected

< 3.0.6 ≥ 4.0.0, < 4.0.2

Fixed in

3.0.6 4.0.2
HIGH7.5 24 Sep 2026

zbateson/mail-mime-parser has uncontrolled resource consumption (CPU/memory DoS) parsing untrusted MIME

GHSA-f6v3-2qmr-vfjx · CVE-2026-61816

Affected

≥ 2.0.0, < 3.0.6 ≥ 4.0.0, < 4.0.2

Fixed in

3.0.6 4.0.2
/advisories/composer/zbateson/mail-mime-parser/feed.rss

From Packagist and the GitHub advisory database · synced hourly

Know when your sites are affected.

Porro reads composer.lock and package-lock from every site on your care plans and puts the ones that need you at the top. Updates arrive as pull requests.

Start your free trial →