Email::Address is deprecated and affected by CVE-2015-7686 even in the last release (1.909), switch to Email::Address::XS #7
Description
See, for the first statement (module deprecation): http://search.cpan.org/~rjbs/Email-Address-1.909/lib/Email/Address.pm
and for the second one (remote DOS): https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7686 .
The CPAN site recommends switching to the Email::Address::XS module(http://search.cpan.org/~pali/Email-Address-XS-1.03/lib/Email/Address/XS.pm),
because it is a drop-in replacement for the original Email::Address and it was created to fix the above CVE.
Please do such switch to Email::Address::XS for Email::Reply...
The passage can be made near trivially, by simply changing all the recurrences (but one) of "Email::Address" to "Email::Address::XS" (see attached patch).