org.eclipse.angus vulnerabilities

Products

• org.eclipse.angus/smtp 1

Latest org.eclipse.angus CVEs

Newest publication first

1. CVE-2025-7962 Jakarta Mail vulnerable to SMTP Injection

   Published 2025-07-21

   Medium·CVSS 6.0 EPSS 0.89%

   In Jakarta Mail versions prior to 2.0.2 it is possible to perform an SMTP Injection by utilizing the \r and \n UTF-8 characters to separate different messages.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.