CVE-2026-125756

The postal-mime library (versions before 4.2.1 ) contains a parser differential vulnerability within its address parser. The issue stems from the parser truncating the domain when encountering folding whitespace or comments preceding a dot. This allows remote attackers to craft From headers that ...