{"metadata": {"vulnerability": "CVE-2026-85108", "count": 12, "kinds": {"milestone": 4, "sighting": 2, "kev": 0, "other": 6}}, "data": [{"timestamp": "2026-09-03T06:49:54.225Z", "date_only": false, "value": "2026-09-03T06:49:54.225Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-85108", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-11-06T11:46:28.639Z", "date_only": false, "value": "2026-11-06T11:46:28.639Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-85108", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-11-06T11:46:28.639Z", "date_only": false, "value": "2026-11-06T11:46:28.639Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / apache", "record": "CVE-2026-85108", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-06T11:55:54.224Z", "date_only": false, "value": "2026-11-06T11:55:54.224963Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117569365848289065", "record": "CVE-2026-85108", "field": "creation_timestamp", "uuid": "d3efa52f-6810-4e6d-a925-11474ea82d37", "content": "CVE-2026-85108 Apache James MIME4J: Denial of service due to Allocation of Resources Without Limits or Throttling Allocation of Resources Without Limits or Throttling in Apache James Mime4J library prior version 0.8.15 allows Denial of Service upon parsing Mime messages.Users are recommended to upgrade to version 0.8.15 which fixes the issue by enforcing new limits and providing better defaults.\nhttps://www.cve.org/CVERecord?id=CVE-2026-85108https://lists.apache.org/thread.html/twktm00gmc8lt7tlqrrj16xw7kzbx16s#apache #ApacheSoftwareFoundation #ApacheJamesMime4JCore #ApacheJamesMime4JDom#CVE_2026_85108#bot", "url": "https://infosec.exchange/users/cve/statuses/117569365848289065"}, {"timestamp": "2026-11-06T11:56:34.624Z", "date_only": false, "value": "2026-11-06T11:56:34.624961Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117569368493977642", "record": "CVE-2026-85108", "field": "creation_timestamp", "uuid": "4d1879e2-51b0-4af3-a80d-415638ff76fc", "content": "CVE-2026-85111 Apache James: Denial of service upon MIME parsing Allocation of Resources Without Limits or Throttling in Apache James Mime4J library prior version 0.8.15 allows Denial of Service upon parsing Mime messages.Users are recommended to upgrade to Apache James server 3.9.1 that relies on fixed MIME4J 0.8.15 which addresses the issue.\nSee CVE-2026-85108 in Apache James MIME4J library.\nhttps://www.cve.org/CVERecord?id=CVE-2026-85111https://lists.apache.org/thread.html/j1bql696qvg935lp8zo0m626jp9n0h8qhttps://www.cve.org/CVERecord?id=CVE-2026-85108#apache #cve #ApacheSoftwareFoundation #ApacheJames#CVE_2026_85111#bot", "url": "https://infosec.exchange/users/cve/statuses/117569368493977642"}, {"timestamp": "2026-11-06T12:17:23Z", "date_only": false, "value": "2026-11-06T12:17:23Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-7J7P-GRHM-J8XQ", "record": "GHSA-7J7P-GRHM-J8XQ", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-11-06T12:17:23.260Z", "date_only": false, "value": "2026-11-06T12:17:23.260", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-85108", "record": "FKIE_CVE-2026-85108", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-06T12:30:47Z", "date_only": false, "value": "2026-11-06T12:30:47Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-7J7P-GRHM-J8XQ", "record": "GHSA-7J7P-GRHM-J8XQ", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-06T19:05:13.588Z", "date_only": false, "value": "2026-11-06T19:05:13.588Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-85108", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-11-06T19:05:13.588Z", "date_only": false, "value": "2026-11-06T19:05:13.588Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2026-85108", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-06T21:31:20Z", "date_only": false, "value": "2026-11-06T21:31:20Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-7J7P-GRHM-J8XQ", "record": "GHSA-7J7P-GRHM-J8XQ", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-06T21:34:42.810Z", "date_only": false, "value": "2026-11-06T21:34:42.810", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-85108", "record": "FKIE_CVE-2026-85108", "field": "lastModified", "linked_record": true}], "metrics": {"as_of": "2026-11-08T14:25:52.388Z", "anchors": {"origin": {"timestamp": "2026-11-06T11:46:28.639Z", "date_only": false, "value": "2026-11-06T11:46:28.639Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-85108", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-11-06T11:46:28.639Z", "date_only": false, "value": "2026-11-06T11:46:28.639Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-85108", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 182363.749103, "hours": 50.65659697305556, "days": 2.1106915405439817, "min_seconds": 182363.749103, "max_seconds": 182363.749103, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-11-06T11:46:28.639Z", "date_only": false, "value": "2026-11-06T11:46:28.639Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-85108", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-08T14:25:52.388Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}