CVE-2026-42499
HIGHPathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322.
Published: 5/7/2026Modified: 10/26/2026
References (101)
https://go.dev/cl/771520Patchhttps://go.dev/issue/78987Issue Trackinghttps://groups.google.com/g/golang-announce/c/qcCIEXso47MRelease Noteshttps://pkg.go.dev/vuln/GO-2026-4977Vendor Advisoryhttps://access.redhat.com/errata/RHSA-2026:17713https://access.redhat.com/errata/RHSA-2026:17714https://access.redhat.com/errata/RHSA-2026:22112https://access.redhat.com/errata/RHSA-2026:22120https://access.redhat.com/errata/RHSA-2026:22121https://access.redhat.com/errata/RHSA-2026:33120https://access.redhat.com/errata/RHSA-2026:33123https://access.redhat.com/errata/RHSA-2026:33142https://access.redhat.com/errata/RHSA-2026:33150https://access.redhat.com/errata/RHSA-2026:33574https://access.redhat.com/errata/RHSA-2026:34364https://access.redhat.com/errata/RHSA-2026:36319https://access.redhat.com/errata/RHSA-2026:36625https://access.redhat.com/errata/RHSA-2026:36754https://access.redhat.com/errata/RHSA-2026:36797https://access.redhat.com/errata/RHSA-2026:40262https://access.redhat.com/errata/RHSA-2026:41031https://access.redhat.com/errata/RHSA-2026:41066https://access.redhat.com/errata/RHSA-2026:41928https://access.redhat.com/errata/RHSA-2026:42146https://access.redhat.com/errata/RHSA-2026:42644https://access.redhat.com/errata/RHSA-2026:42796https://access.redhat.com/errata/RHSA-2026:43038https://access.redhat.com/errata/RHSA-2026:43052https://access.redhat.com/errata/RHSA-2026:43692https://access.redhat.com/errata/RHSA-2026:47952https://access.redhat.com/errata/RHSA-2026:49702https://access.redhat.com/errata/RHSA-2026:49712https://access.redhat.com/errata/RHSA-2026:50300https://access.redhat.com/errata/RHSA-2026:50319https://access.redhat.com/errata/RHSA-2026:50336https://access.redhat.com/errata/RHSA-2026:50843https://access.redhat.com/errata/RHSA-2026:51033https://access.redhat.com/errata/RHSA-2026:51112https://access.redhat.com/errata/RHSA-2026:54274https://access.redhat.com/errata/RHSA-2026:54283https://access.redhat.com/errata/RHSA-2026:54284https://access.redhat.com/errata/RHSA-2026:54285https://access.redhat.com/errata/RHSA-2026:54286https://access.redhat.com/errata/RHSA-2026:54287https://access.redhat.com/errata/RHSA-2026:54531https://access.redhat.com/errata/RHSA-2026:54552https://access.redhat.com/errata/RHSA-2026:54555https://access.redhat.com/errata/RHSA-2026:54583https://access.redhat.com/errata/RHSA-2026:54602https://access.redhat.com/errata/RHSA-2026:56340https://access.redhat.com/errata/RHSA-2026:56785https://access.redhat.com/errata/RHSA-2026:56789https://access.redhat.com/errata/RHSA-2026:56852https://access.redhat.com/errata/RHSA-2026:56854https://access.redhat.com/errata/RHSA-2026:56910https://access.redhat.com/errata/RHSA-2026:56912https://access.redhat.com/errata/RHSA-2026:57194https://access.redhat.com/errata/RHSA-2026:57482https://access.redhat.com/errata/RHSA-2026:57487https://access.redhat.com/errata/RHSA-2026:57649https://access.redhat.com/errata/RHSA-2026:57845https://access.redhat.com/errata/RHSA-2026:57914https://access.redhat.com/errata/RHSA-2026:59467https://access.redhat.com/errata/RHSA-2026:59830https://access.redhat.com/errata/RHSA-2026:59833https://access.redhat.com/errata/RHSA-2026:60018https://access.redhat.com/errata/RHSA-2026:60023https://access.redhat.com/errata/RHSA-2026:60520https://access.redhat.com/errata/RHSA-2026:61253https://access.redhat.com/errata/RHSA-2026:62260https://access.redhat.com/errata/RHSA-2026:62406https://access.redhat.com/errata/RHSA-2026:62407https://access.redhat.com/errata/RHSA-2026:62753https://access.redhat.com/errata/RHSA-2026:62754https://access.redhat.com/errata/RHSA-2026:62803https://access.redhat.com/errata/RHSA-2026:63022https://access.redhat.com/errata/RHSA-2026:63163https://access.redhat.com/errata/RHSA-2026:63332https://access.redhat.com/errata/RHSA-2026:63636https://access.redhat.com/errata/RHSA-2026:64818https://access.redhat.com/errata/RHSA-2026:65116https://access.redhat.com/errata/RHSA-2026:65117https://access.redhat.com/errata/RHSA-2026:65153https://access.redhat.com/errata/RHSA-2026:65335https://access.redhat.com/errata/RHSA-2026:65336https://access.redhat.com/errata/RHSA-2026:65534https://access.redhat.com/errata/RHSA-2026:65838https://access.redhat.com/errata/RHSA-2026:65886https://access.redhat.com/errata/RHSA-2026:65895https://access.redhat.com/errata/RHSA-2026:66022https://access.redhat.com/errata/RHSA-2026:66327https://access.redhat.com/errata/RHSA-2026:67148https://access.redhat.com/errata/RHSA-2026:67517https://access.redhat.com/errata/RHSA-2026:67974https://access.redhat.com/errata/RHSA-2026:67975https://access.redhat.com/errata/RHSA-2026:68334https://access.redhat.com/errata/RHSA-2026:68504https://access.redhat.com/errata/RHSA-2026:68527https://access.redhat.com/security/cve/CVE-2026-42499https://bugzilla.redhat.com/show_bug.cgi?id=2467809https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42499.json