PatchClock

PHP security digest · Packages

zbateson/mail-mime-parser security advisories

2 advisories we have followed since September 2026, 2 of them critical or high, newest first. Each page says who is affected, which versions fix it and how to check your project.

  1. High 24 Sep 2026

    zbateson/mail-mime-parser has CRLF header injection via attachment filename

    Fixed in 3.0.6, 4.0.2 · CVE-2026-61815

  2. High 24 Sep 2026

    zbateson/mail-mime-parser has uncontrolled resource consumption (CPU/memory DoS) parsing untrusted MIME

    Fixed in 3.0.6, 4.0.2 · CVE-2026-61816

Check your project in one command

Composer compares your composer.lock with the public advisory databases:

composer audit

It lists every installed package with a known advisory, including zbateson/mail-mime-parser, and the version that fixes it.