Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.jamesframework/james@3.6.1
purl pkg:maven/org.jamesframework/james@3.6.1
Tags Ghost
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 3.1
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-1vru-s5v2-dbcq
Aliases:
CVE-2022-22931
GHSA-v84g-cf5j-xjqx
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Fix of CVE-2021-40525 do not prepend delimiters upon valid directory validations. Affected implementations include the maildir mailbox store and the Sieve file repository. This enables a user to access other users data stores (limited to user names being prefixed by the value of the username being used).
3.6.2
Affected by 1 other vulnerability.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T12:49:23.245864+00:00 GitLab Importer Affected by VCID-1vru-s5v2-dbcq https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.jamesframework/james/CVE-2022-22931.yml 38.0.0
2026-04-01T12:49:13.352516+00:00 GitLab Importer Fixing VCID-gcxw-t4m6-4bcs https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.jamesframework/james/CVE-2021-38542.yml 38.0.0
2026-04-01T12:49:13.077454+00:00 GitLab Importer Fixing VCID-repa-s2hq-qyfu https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.jamesframework/james/CVE-2021-40110.yml 38.0.0