- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 4 · 4 high
- Registry
- pkg.go.dev
Advisories 4
- CVE-2026-39820High 7.5
Quadratic string concatentation in consumeComment in net/mail
Affected: fixed in 1.25.10; from 1.26.0-0, fixed in 1.26.3.
- CVE-2026-42499High 7.5
Quadratic string concatenation in consumePhrase in net/mail
Affected: fixed in 1.25.10; from 1.26.0-0, fixed in 1.26.3.
- CVE-2025-61725High 7.5
Excessive CPU consumption in ParseAddress in net/mail
Affected: fixed in 1.24.8; from 1.25.0, fixed in 1.25.2.
- CVE-2024-24784High 7.5
Comments in display names are incorrectly handled in net/mail
Affected: fixed in 1.21.8; from 1.22.0-0, fixed in 1.22.1.