Lucene search

K
osvGoogleOSV:BIT-GOLANG-2024-24784
HistoryMar 12, 2024 - 8:24 a.m.

BIT-golang-2024-24784

2024-03-1208:24:22
Google
osv.dev
6
parseaddresslist
misalignment
conforming address parsers
trust decisions
software

6.6 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.7%

The ParseAddressList function incorrectly handles comments (text within parentheses) within display names. Since this is a misalignment with conforming address parsers, it can result in different trust decisions being made by programs using different parsers.

CPENameOperatorVersion
golanglt1.21.8
golanglt1.22.1
golangge1.22.0-0

6.6 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.7%