zbateson mail-mime-parser

• CVE-2026-121946 High 7.2 zbateson mail-mime-parser before 3.0.9 and 4.x before 4.0.6 CRLF Header Injection via Message Builders 0.3%
• CVE-2026-61816 High 7.5 zbateson/mail-mime-parser has uncontrolled resource consumption (CPU/memory DoS) parsing untrusted MIME 0.4%
• CVE-2026-61815 High 7.2 zbateson/mail-mime-parser has CRLF header injection via attachment filename 0.2%