Threats affecting pkg:golang/net/mail

2 threats

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.5	EPSS 0.8%	CVE-2026-39820Go standard library net/mail · Inefficient Algorithmic Complexity High7.5EPSS 0.8%2026-05-07CVE Database V5CVE-2026-39820 Well-crafted inputs reaching ParseAddress, ParseAddressList, and ParseDate were able to trigger excessive CPU exhaustion and memory allocations. EPSS 0.8%Vulnerability CWE-407 #ghsa-p9h5-jm8x-mjm5	CVE Database V5	2026-05-07
High	7.5	EPSS 0.8%	CVE-2026-42499Go standard library net/mail · Inefficient Algorithmic Complexity High7.5EPSS 0.8%2026-05-07CVE Database V5CVE-2026-42499 Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322. EPSS 0.8%Vulnerability CWE-407	CVE Database V5	2026-05-07

Page 1 of 1