Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322.
| Vendor | Product | Versions |
|---|---|---|
| apache | james | 0, 1.26.0-0 |
Downstream vendors/products affected by this vulnerability
| Vendor | Product | Source | Confidence |
|---|---|---|---|
| golang | go | cert_advisory | 90% |
Updated severity to HIGH, added affected versions 1.25.9 and 1.26.2, and noted that no exploit is available.
Initial creation