high7.5
CVE-2026-42499
Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322.
Impact
Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Golang | Go | before 1.25.10 from 1.26.0 before 1.26.3 |
Weakness classification
References
- NVD record
- CVE.org record
- https://go.dev/cl/771520
- https://go.dev/issue/78987
- https://groups.google.com/g/golang-announce/c/qcCIEXso47M
- https://pkg.go.dev/vuln/GO-2026-4977
- https://access.redhat.com/errata/RHSA-2026:17713
- https://access.redhat.com/errata/RHSA-2026:17714
- https://access.redhat.com/errata/RHSA-2026:22112
- https://access.redhat.com/errata/RHSA-2026:22120
- https://access.redhat.com/errata/RHSA-2026:22121
- https://access.redhat.com/errata/RHSA-2026:33120
- https://access.redhat.com/errata/RHSA-2026:33123
- https://access.redhat.com/errata/RHSA-2026:33142
- https://access.redhat.com/errata/RHSA-2026:33150
- https://access.redhat.com/errata/RHSA-2026:33574
- https://access.redhat.com/errata/RHSA-2026:34364
- https://access.redhat.com/errata/RHSA-2026:36319
- https://access.redhat.com/errata/RHSA-2026:36625
- https://access.redhat.com/errata/RHSA-2026:36754
- https://access.redhat.com/errata/RHSA-2026:36797
- https://access.redhat.com/errata/RHSA-2026:40262
- https://access.redhat.com/errata/RHSA-2026:41031
- https://access.redhat.com/errata/RHSA-2026:41066
- https://access.redhat.com/errata/RHSA-2026:41928
- https://access.redhat.com/errata/RHSA-2026:42146
- https://access.redhat.com/errata/RHSA-2026:42644