The go-mail library (github.com/wneessen/go-mail) had a vulnerability in versions prior to 0.7.1 where mail addresses passed to the SMTP client were not properly encoded. This improper handling allowed raw mail address values to be sent directly, potentially enabling wrong address routing or SMTP command smuggling. The issue was fixed in version 0.7.1.