CVE-2026-39820

Опубликовано: 07 мая 2026

Источник: nvd

CVSS3: 7.5

EPSS Низкий

Описание

Well-crafted inputs reaching ParseAddress, ParseAddressList, and ParseDate were able to trigger excessive CPU exhaustion and memory allocations.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*

Версия до 1.25.10 (исключая)

cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*

Версия от 1.26.0 (включая) до 1.26.3 (исключая)

EPSS

Процентиль: 52%

0.00784

Низкий

7.5 High

CVSS3

Дефекты

CWE-770

CWE-606

Связанные уязвимости

CVE-2026-39820

CVSS3: 7.5

ubuntu

3 месяца назад

Well-crafted inputs reaching ParseAddress, ParseAddressList, and ParseDate were able to trigger excessive CPU exhaustion and memory allocations.

CVE-2026-39820

CVSS3: 7.5

redhat

3 месяца назад

Well-crafted inputs reaching ParseAddress, ParseAddressList, and ParseDate were able to trigger excessive CPU exhaustion and memory allocations.

CVE-2026-39820

msrc

3 месяца назад

Quadratic string concatentation in consumeComment in net/mail

CVE-2026-39820

CVSS3: 7.5

debian

3 месяца назад

Well-crafted inputs reaching ParseAddress, ParseAddressList, and Parse ...

GHSA-p9h5-jm8x-mjm5

CVSS3: 7.5

github

3 месяца назад

Well-crafted inputs reaching ParseAddress, ParseAddressList, and ParseDate were able to trigger excessive CPU exhaustion and memory allocations.

EPSS

Процентиль: 52%

0.00784

Низкий

7.5 High

CVSS3

Дефекты

CWE-770

CWE-606