Skip to content
OpenAdvisories

Package · npm

postal-mime

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    GHSA-f2hq-32vh-53cc

    postal-mime: Quadratic CPU consumption when decoding a header of many joinable RFC 2047 base64 encoded words

    ### Impact Decoding a header that holds a long run of joinable RFC 2047 base64 encoded words, such as `=?utf-8?B?QUJD?=` repeated tens of thousands of times in a `Subject`, `From`, `To`, a filename or a description, took time quadratic in the number of words.…

    postal-mime npm