WhatBrokeToday
Today's Trends
highInvestigatingApachevApache James server 3.9.1 or higher, which includes fixed MIME4J version 0.8.15

Apache James Mime4J Library Denial of Service

  1. Investigating(current)
  2. Trending(upcoming)
  3. Workaround available(upcoming)
  4. Resolved(upcoming)

Executive summary

CVE-2026-85111 in Apache James Mime4J library leads to a Denial of Service (DoS) vulnerability. Users are advised to upgrade to version 3.9.1 or higher, which includes the fix for this issue.

No verified workaround yet

None of the linked reports describe a mitigation. Follow this incident to hear when one appears.

Official fix
Technical root cause

Allocation of Resources Without Limits or Throttling in Apache James Mime4J library prior version 0.8.15 allows Denial of Service upon parsing Mime messages

Evidence

2 reports · 2 CVEShow
  1. [1]
    CVE First report
    Apache James Mime4J library: CVE-2026-85111 (High)(opens security advisory in a new tab)

    High severity. Allocation of Resources Without Limits or Throttling in Apache James Mime4J library prior version 0.8.15 allows Denial of Service upon parsing Mime messages. Users are recommended to upgrade to Apache James server 3.9.1 that relies on fixed MIME4J 0.8.15 which addresses the issue. See CVE-2026-85108 in Apache James MIME4J library.

    by Tenable 0upvotes 0comments

  2. [2]
    CVE
    Apache James Mime4J library: CVE-2026-85108 (High)(opens security advisory in a new tab)

    High severity. Allocation of Resources Without Limits or Throttling in Apache James Mime4J library prior version 0.8.15 allows Denial of Service upon parsing Mime messages. Users are recommended to upgrade to version 0.8.15 which fixes the issue by enforcing new limits and providing better defaults.

    by Tenable 0upvotes 0comments98% match

Timeline

  1. First report on security advisory

    Apache James Mime4J library: CVE-2026-85111 (High)

    Source