Lucene search

K
osvGoogleOSV:GO-2024-2609
HistoryMar 05, 2024 - 10:15 p.m.

Comments in display names are incorrectly handled in net/mail

2024-03-0522:15:04
Google
osv.dev
3
parseaddresslist
misalignment
conforming
address parsers
trust decisions
software

7.1 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.7%

The ParseAddressList function incorrectly handles comments (text within parentheses) within display names. Since this is a misalignment with conforming address parsers, it can result in different trust decisions being made by programs using different parsers.

CPENameOperatorVersion
stdlibge1.22.0-0
stdliblt1.21.8
stdliblt1.22.1