https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-29T18:52:19.883298+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/ghsa-8mr9-wfcj-h3rm GHSA-8mr9-wfcj-h3rm 2026-10-29T18:52:19.893720+00:00

MIME::Field::ParamVal versions before 5.521 for Perl allow one invalid Content-Type parameter to hide the parameters after it, including the multipart boundary.

Parameter parsing stops at the first parameter whose name it cannot read, such as x:y=1 or a name containing an 8-bit byte, and drops every parameter after it. When the boundary is among them, MIME::Parser keeps the multipart body as a single undecoded part without marking the parse as ambiguous.

Mail readers that skip the invalid parameter still find the boundary. A remote sender can hide an attachment from a filter that relies on ambiguous_content() while the recipient's mail client shows it.

 https://db.gcve.eu/vuln/ubuntu-cve-2026-116264 UBUNTU-CVE-2026-116264 2026-10-29T18:52:19.893776+00:00

Affected: Ubuntu:14.04:LTS: libmime-tools-perl, Ubuntu:16.04:LTS: libmime-tools-perl, Ubuntu:18.04:LTS: libmime-tools-perl, Ubuntu:20.04:LTS: libmime-tools-perl, Ubuntu:22.04:LTS: libmime-tools-perl, Ubuntu:24.04:LTS: libmime-tools-perl, Ubuntu:26.10: libmime-tools-perl, Ubuntu:26.04:LTS: libmime-tools-perl

[Unknown description]