| CVE-2026-39820 |
Well-crafted inputs reaching ParseAddress, ParseAddressList, and ParseDate were able to trigger excessive CPU exhaustion…
|
7.5
High
|
May 7, 2026 |
| CVE-2026-42499 |
Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322
|
7.5
High
|
May 7, 2026 |
| CVE-2025-61725 |
The ParseAddress function constructs domain-literal address components through repeated string concatenation
|
7.5
High
|
Oct 29, 2025 |
| CVE-2024-24784 |
The ParseAddressList function incorrectly handles comments (text within parentheses) within display names
|
7.5
High
|
Mar 5, 2024 |