Threats affecting pkg:github/exim/exim

Exim versions prior to 4.97.1 contain a vulnerability that allows SMTP smuggling in certain PIPELINING/CHUNKING configurations. This flaw enables remote attackers to inject email messages with a spoofed MAIL FROM address, potentially bypassing SPF protection mechanisms. The issue arises because Exim supports the sequence <LF>.<CR><LF>, which some other popular email servers do not handle correctly. A fix is available in Exim version 4.97.1.