| CVE-2026-39820 |
Well-crafted inputs reaching ParseAddress, ParseAddressList, and ParseDate were able to trigger excessive CPU exhaustion…
|
7.5
Élevée
|
7 mai 2026 |
| CVE-2026-42499 |
Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322
|
7.5
Élevée
|
7 mai 2026 |
| CVE-2025-61725 |
The ParseAddress function constructs domain-literal address components through repeated string concatenation
|
7.5
Élevée
|
29 oct. 2025 |
| CVE-2024-24784 |
The ParseAddressList function incorrectly handles comments (text within parentheses) within display names
|
7.5
Élevée
|
5 mars 2024 |