Apache Commons Email aims to provide an API for sending email. It is built on top of the JavaMail API, which it aims to simplify.
Known vulnerabilities in the org.apache.commons:commons-email package. This does not include vulnerabilities belonging to this package’s dependencies.Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Affected versions of
How to fix Information Exposure?
Affected versions of the package are vulnerable to SMTP Header Injection. When a call-site passes a subject for an email that contains line-breaks in Apache Commons Email 1.0 through 1.4, the caller can add arbitrary SMTP headers.
How to fix SMTP Header Injection?