CVE-2023-23397_EXPLOIT_0DAY

CVE-2023-23397EXPLOIT0DAY Exploit for the CVE-2023-23397 Credit to domchell EML/MSG Checker for the exploit: !/usr/bin/env python3 from extractmsg import AppointmentMeeting from ..helpers import Status from ..task import Task from ..report import Report from .base import BaseWorker class...

patchwork-cli (>=0.0.99.dev0, <=0.0.125.dev0) potentially affected by CVE-2026-55618 via eml-parser (2.0.1)

eml-parser PYPI version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on eml-parser and may be impacted: - patchwork-cli =0.0.99.dev0, =0.0.125.dev0 Source cves: CVE-2026-55618 Source advisory: OSV:PYSEC-2026-3831...

patchwork-cli (>=0.0.99.dev0, <=0.0.125.dev0) potentially affected by CVE-2026-55619 via eml-parser (2.0.1)

eml-parser PYPI version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on eml-parser and may be impacted: - patchwork-cli =0.0.99.dev0, =0.0.125.dev0 Source cves: CVE-2026-55619 Source advisory: OSV:PYSEC-2026-3833...

axa-fr-splitter (>=0.0.2, <=0.1.2), cyvoreos (>=0.2.0.3b0, <=0.2.0.7b0) +3 more potentially affected by CVE-2026-55620 via eml-parser (1.17.5)

eml-parser PYPI version 1.17.5 is affected by a known vulnerability. The following packages have a transitive dependency on eml-parser and may be impacted: - axa-fr-splitter =0.0.2, =0.2.0.3b0, =1.0.7, =1.1.1b0, =0.1.13, =0.3.1 Source cves: CVE-2026-55620 Source advisory: OSV:PYSEC-2026-3832...

patchwork-cli (>=0.0.99.dev0, <=0.0.125.dev0) potentially affected by CVE-2026-55620 via eml-parser (2.0.1)

eml-parser PYPI version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on eml-parser and may be impacted: - patchwork-cli =0.0.99.dev0, =0.0.125.dev0 Source cves: CVE-2026-55620 Source advisory: OSV:PYSEC-2026-3832...

axa-fr-splitter (>=0.0.2, <=0.1.2), cyvoreos (>=0.2.0.3b0, <=0.2.0.7b0) +3 more potentially affected by CVE-2026-55619 via eml-parser (1.17.5)

eml-parser PYPI version 1.17.5 is affected by a known vulnerability. The following packages have a transitive dependency on eml-parser and may be impacted: - axa-fr-splitter =0.0.2, =0.2.0.3b0, =1.0.7, =1.1.1b0, =0.1.13, =0.3.1 Source cves: CVE-2026-55619 Source advisory: OSV:PYSEC-2026-3833...

axa-fr-splitter (>=0.0.2, <=0.1.2), cyvoreos (>=0.2.0.3b0, <=0.2.0.7b0) +3 more potentially affected by CVE-2026-55618 via eml-parser (1.17.5)

eml-parser PYPI version 1.17.5 is affected by a known vulnerability. The following packages have a transitive dependency on eml-parser and may be impacted: - axa-fr-splitter =0.0.2, =0.2.0.3b0, =1.0.7, =1.1.1b0, =0.1.13, =0.3.1 Source cves: CVE-2026-55618 Source advisory: OSV:PYSEC-2026-3831...

patchwork-cli (>=0.0.99.dev0, <=0.0.125.dev0) potentially affected by CVE-2026-55620 via eml-parser (2.0.1)

eml-parser PYPI version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on eml-parser and may be impacted: - patchwork-cli =0.0.99.dev0, =0.0.125.dev0 Source cves: CVE-2026-55620 Source advisory: OSV:GHSA-G7GC-GMGP-WGQG...

axa-fr-splitter (>=0.0.2, <=0.1.2), cyvoreos (>=0.2.0.3b0, <=0.2.0.7b0) +3 more potentially affected by CVE-2026-55620 via eml-parser (1.17.5)

eml-parser PYPI version 1.17.5 is affected by a known vulnerability. The following packages have a transitive dependency on eml-parser and may be impacted: - axa-fr-splitter =0.0.2, =0.2.0.3b0, =1.0.7, =1.1.1b0, =0.1.13, =0.3.1 Source cves: CVE-2026-55620 Source advisory: OSV:GHSA-G7GC-GMGP-WGQG...

Excessively Deep Nesting

Overview eml-parser is a Python EML parser library Affected versions of this package are vulnerable to Excessively Deep Nesting through the processing of deeply nested parentheses in Received headers. An attacker can cause excessive CPU consumption by submitting specially crafted EML files with a...

axa-fr-splitter (>=0.0.2, <=0.1.2), cyvoreos (>=0.2.0.3b0, <=0.2.0.7b0) +4 more potentially affected by CVE-2026-55620 via eml-parser (>=1.17.5, <=2.0.1)

eml-parser PYPI version =1.17.5, =0.0.2, =0.2.0.3b0, =1.0.7, =1.1.1b0, =0.1.13, =0.0.99.dev0, =0.0.125.dev0 Source cves: CVE-2026-55620 Source advisory: MEND:CVE-2026-55620...

axa-fr-splitter (>=0.0.2, <=0.1.2), cyvoreos (>=0.2.0.3b0, <=0.2.0.7b0) +3 more potentially affected by CVE-2026-55619 via eml-parser (1.17.5)

eml-parser PYPI version 1.17.5 is affected by a known vulnerability. The following packages have a transitive dependency on eml-parser and may be impacted: - axa-fr-splitter =0.0.2, =0.2.0.3b0, =1.0.7, =1.1.1b0, =0.1.13, =0.3.1 Source cves: CVE-2026-55619 Source advisory: OSV:GHSA-M66C-FW79-6359...

Excessively Deep Nesting

Overview eml-parser is a Python EML parser library Affected versions of this package are vulnerable to Excessively Deep Nesting in the parsing process of e-mail headers containing deeply nested parentheses. An attacker can cause the application to exhaust the call stack and terminate unexpectedly...

patchwork-cli (>=0.0.99.dev0, <=0.0.125.dev0) potentially affected by CVE-2026-55619 via eml-parser (2.0.1)

eml-parser PYPI version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on eml-parser and may be impacted: - patchwork-cli =0.0.99.dev0, =0.0.125.dev0 Source cves: CVE-2026-55619 Source advisory: OSV:GHSA-M66C-FW79-6359...

CVE-2026-55619 eml_parser: Parser DoS via deeply nested parentheses in e-mail headers

emlparser serves as a python module for parsing eml files and returning various information found in the e-mail as well as computed information. Prior to 3.0.2, emlparser.parser.HeaderParser.headerfetchparse in emlparser/parser.py uses email.utils.getaddresses to parse address-bearing e-mail...

axa-fr-splitter (>=0.0.2, <=0.1.2), cyvoreos (>=0.2.0.3b0, <=0.2.0.7b0) +4 more potentially affected by CVE-2026-55619 via eml-parser (>=1.17.5, <=2.0.1)

eml-parser PYPI version =1.17.5, =0.0.2, =0.2.0.3b0, =1.0.7, =1.1.1b0, =0.1.13, =0.0.99.dev0, =0.0.125.dev0 Source cves: CVE-2026-55619 Source advisory: MEND:CVE-2026-55619...

patchwork-cli (>=0.0.99.dev0, <=0.0.125.dev0) potentially affected by CVE-2026-55618 via eml-parser (2.0.1)

eml-parser PYPI version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on eml-parser and may be impacted: - patchwork-cli =0.0.99.dev0, =0.0.125.dev0 Source cves: CVE-2026-55618 Source advisory: OSV:GHSA-FXGQ-9M89-CXJ9...

axa-fr-splitter (>=0.0.2, <=0.1.2), cyvoreos (>=0.2.0.3b0, <=0.2.0.7b0) +3 more potentially affected by CVE-2026-55618 via eml-parser (1.17.5)

eml-parser PYPI version 1.17.5 is affected by a known vulnerability. The following packages have a transitive dependency on eml-parser and may be impacted: - axa-fr-splitter =0.0.2, =0.2.0.3b0, =1.0.7, =1.1.1b0, =0.1.13, =0.3.1 Source cves: CVE-2026-55618 Source advisory: OSV:GHSA-FXGQ-9M89-CXJ9...

Improper Encoding or Escaping of Output

Overview eml-parser is a Python EML parser library Affected versions of this package are vulnerable to Improper Encoding or Escaping of Output in the URL extraction process. An attacker can cause valid URLs containing HTML entities to be omitted from extraction by encoding characters such as :, /...

axa-fr-splitter (>=0.0.2, <=0.1.2), cyvoreos (>=0.2.0.3b0, <=0.2.0.7b0) +4 more potentially affected by CVE-2026-55618 via eml-parser (>=1.17.5, <=2.0.1)

eml-parser PYPI version =1.17.5, =0.0.2, =0.2.0.3b0, =1.0.7, =1.1.1b0, =0.1.13, =0.0.99.dev0, =0.0.125.dev0 Source cves: CVE-2026-55618 Source advisory: MEND:CVE-2026-55618...