Threats affecting pkg:maven/org.apache.james/james-server

CVE-2026-85111 is a high-severity vulnerability in Apache James server versions prior to 3.9.1. It involves allocation of resources without limits or throttling in the Apache James Mime4J library before version 0.8.15, which can lead to denial of service when parsing MIME messages. The issue is fixed in Apache James 3.9.1, which uses the updated MIME4J 0.8.15 library.