CVE Catalog
CVE-2026-42499
HighCVSS 7.5Exploitation Probability (EPSS)
Elevated risk0.80%
56th percentile - higher than 56% of all known CVEs
Summary
Specially crafted input can cause a denial of service (DoS) through the consumePhrase function when parsing an email address according to RFC 5322.
Risk Assessment
The risk for the organization is the potential disruption of services that process email addresses, which could lead to system unavailability.
Recommendation
It is recommended to implement limits on input length and complexity, and update the parsing library to a version containing the fix.
Other vulnerabilities in Email parsing library
Original NVD description (English source)
Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS