CVE-2025-7962

Publication date 21 July 2025

Last updated 1 August 2025

Ubuntu priority

Description

In Jakarta Mail 2.0.2 it is possible to preform a SMTP Injection by utilizing the \r and \n UTF-8 characters to separate different messages.

Show unmaintained releases

Package	Ubuntu Release	Status
jakarta-mail	25.10 questing	Needs evaluation
	25.04 plucky	Ignored end of life, was needs-triage
	24.04 LTS noble	Needs evaluation
	22.04 LTS jammy	Needs evaluation