CVE-2026-44844

CVE-2026-44844 affects the Python eml_parser project. The advisory describes a RecursionError DoS in EmlParser.get_raw_body_text(), which recursively processes all nested message/rfc822 parts without a depth limit. In versions before 3.0.1, an attacker can craft an EML file with roughly 120 neste...

CVE-2026-44844: Uncontrolled Recursion

emlparser serves as a python module for parsing eml files and returning various information found in the e-mail as well as computed information. Prior to 3.0.1, EmlParser.getrawbodytext recurses unconditionally for every nested message/rfc822 attachment without any depth limit. An attacker who ca...

CVE-2026-29780: Improper Limitation of a Pathname to a Restricted Directory

emlparser serves as a python module for parsing eml files and returning various information found in the e-mail as well as computed information. Prior to version 2.0.1, the official example script examples/recursivelyextractattachments.py contains a path traversal vulnerability that allows...