[java-sig-commits] [Bug 1540000] CVE-2018-1294 apache-commons-email: Improper validation in Email.setBounceAddress() can allow for email modification