—
GO-2026-4977
Quadratic string concatenation in consumePhrase in net/mail
Quick fix
GO-2026-4977 — stdlib: upgrade to the fixed version with the command below.
go get stdlib@v1.25.10Details
Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322.
Are you affected?
Enter the version of the package you're using.