Vulnerabilidades do Go standard library Net/mail

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Go standard library Net/mail: 3 registro(s), com versões afetadas e correções.

CVE-2026-42499 Alta · 7.5 CWE-1046 07/05/2026

Quadratic string concatenation in consumePhrase in net/mail

Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322.

CVE-2026-39820 Alta · 7.5 CWE-770 07/05/2026

Quadratic string concatentation in consumeComment in net/mail

Well-crafted inputs reaching ParseAddress, ParseAddressList, and ParseDate were able to trigger excessive CPU exhaustion and memory allocations.

CVE-2025-61725 Alta · 7.5 29/10/2025

Excessive CPU consumption in ParseAddress in net/mail

The ParseAddress function constructs domain-literal address components through repeated string concatenation. When parsing large domain-literal components, this can cause excessive CPU consumption.