https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T13:15:57.466230+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2018-1294 CVE-2018-1294 2026-10-04T13:15:57.481881+00:00

Affected: Apache Software Foundation Apache Commons Email

If a user of Apache Commons Email (typically an application programmer) passes unvalidated input as the so-called "Bounce Address", and that input contains line-breaks, then the email details (recipients, contents, etc.) might be manipulated. Mitigation: Users should upgrade to Commons-Email 1.5. You can mitigate this vulnerability for older versions of Commons Email by stripping line-breaks from data, that will be passed to Email.setBounceAddress(String).