7.5
Élevée
CVE-2025-61725 The ParseAddress function constructs domain-literal address components through repeated string concatenation
Description
The ParseAddress function constructs domain-literal address components through repeated string concatenation. When parsing large domain-literal components, this can cause excessive CPU consumption.
Produits et versions touchés
Références
- go.dev go.dev
- go.dev go.dev
- groups.google.com groups.google.com
- pkg.go.dev pkg.go.dev
Chronologie
- Publiée
- Dernière modification
Autres CVE de net/mail
Les 4 CVE de net/mail →
CVE-2026-39820
Well-crafted inputs reaching ParseAddress, ParseAddressList, and ParseDate were able to trigger excessive CPU exhaustion…
7.5
Élevée
CVE-2026-42499
Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322
7.5
Élevée
CVE-2024-24784
The ParseAddressList function incorrectly handles comments (text within parentheses) within display names
7.5
Élevée