{"action":"Upgrade org.apache.james:apache-mime4j-core to 0.8.10 or later.","affected":[{"fixed":"0.8.10","introduced":"0"}],"component":"org.apache.james:apache-mime4j-core","cve_ids":["CVE-2024-21742"],"ecosystem":"Maven","epss":0.01091,"exploited":false,"fixed_versions":["0.8.10"],"ghsa_id":"GHSA-jw7r-rxff-gv24","id":"tcs_01M5N93S31EK65RV20GSD5FQYJ","modified_at":"2026-09-10T03:50:06.254540560Z","published_at":"2024-02-27T18:31:02Z","references":["https://osv.dev/vulnerability/GHSA-jw7r-rxff-gv24","https://nvd.nist.gov/vuln/detail/CVE-2024-21742","https://github.com/apache/james-mime4j/commit/9dec5df2a588fed8027839815daefa79ee66efd1","https://github.com/apache/james-mime4j/commit/d25fb3fd35db42b060789a20634fbe3cb84aba17","https://github.com/apache/james-mime4j","https://lists.apache.org/thread/nrqzg93219wdj056pqfszsd33dc54kfy","http://www.openwall.com/lists/oss-security/2024/02/27/5"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-jw7r-rxff-gv24","url":"https://osv.dev/vulnerability/GHSA-jw7r-rxff-gv24"}],"summary":"Apache James MIME4J improper input validation vulnerability"}