Search: CVE-2025-61725

CVE-2025-61725 is a high-severity vulnerability in the Go standard library's net/mail package. The ParseAddress function inefficiently constructs domain-literal address components using repeated string concatenation, which can lead to excessive CPU consumption when processing large domain-literal components. This results in a denial of service condition due to resource exhaustion. The vulnerability affects Go versions up to 1.25.0. No official patch or remediation guidance is currently available, and no known exploits have been reported in the wild.