Advisories for Maven/Org.apache.commons/Commons-Email package

If a user of Apache Commons Email (typically an application programmer) passes unvalidated input as the Bounce Address, and the input contains line-breaks, then the email details (recipients, contents, etc.) might be manipulated.

When a call-site passes a subject for an email that contains line-breaks, the caller can add arbitrary SMTP headers.