CVE-2026-42499 Quadratic string concatenation in consumePhrase in net/mail

Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322...

PT-2026-38569

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description Pathological inputs can cause a Denial of Service DoS during the parsing of email addresses according to RFC 5322. This issue occurs within the consumePhrase...