VDB
KO

GO-2026-4977

Quadratic string concatenation in consumePhrase in net/mail

Details

Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322.

Are you affected?

Enter the version of the package you're using.

Affected packages

Go / stdlib
Introduced in: 0 Fixed in: 1.25.10
Fix go get stdlib@v1.25.10

References