The vulnerability occurs during address list folding in CPython when a separating comma ends a folded line that is then unicode-encoded. Instead of preserving the comma as a plain ASCII character, the implementation encodes the comma as a unicode character. This behavior deviates from expected standards and can cause some mail servers to misinterpret the address header. The issue affects CPython versions 3.10.0, 3.11.0, 3.12.0, 3.13.0, and 3.13.0a1. The CVSS 4.0 base score is 2.3, indicating low severity, with network attack vector, high attack complexity, and partial attack requirements.

The impact is limited to potential misinterpretation of email address headers by some mail servers due to the incorrect unicode encoding of a separating comma. This may affect email processing but does not directly lead to code execution, privilege escalation, or data disclosure. No known exploits are reported in the wild.

No official patch or fix is currently available for this vulnerability. Patch status is not yet confirmed — check the Python Software Foundation advisory for current remediation guidance. Given the low severity and nature of the issue, no urgent mitigation actions are indicated at this time.