CVE-2026-42499
Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322.
CVSS
7.5
High
EPSS
0.8%
p52
KEV
—
Exploit Today
16
0-100
Published: May 7, 2026 · Last modified: Jul 16, 2026 · CWE-1046
0.8%EPSS · 30 days0.8%
2026-06-302026-07-16
Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322.
- go.devhttps://go.dev/cl/771520
- go.devhttps://go.dev/issue/78987
- groups.google.comhttps://groups.google.com/g/golang-announce/c/qcCIEXso47M
- pkg.go.devhttps://pkg.go.dev/vuln/GO-2026-4977
- access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:17713
- access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:17714
- access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:33120
- access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:33123
- access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:33142
- access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:33150
- access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:33574
- access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:34364
- access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:36319
- access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:36625
- access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:36754
- access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:36797
- access.redhat.comhttps://access.redhat.com/errata/RHSA-2026:40262
- access.redhat.comhttps://access.redhat.com/security/cve/CVE-2026-42499
- bugzilla.redhat.comhttps://bugzilla.redhat.com/show_bug.cgi?id=2467809
- security.access.redhat.comhttps://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42499.json
No related CVEs by CWE or product.