NE
Product
net/mail
by Go standard library · last CVE May 7, 2026
3
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 3Medium 0Low 0
Watch

Add net/mail to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-39820
7.5
1%
May 7
Quadratic string concatentation in consumeComment in net/mail
Affected: before 1.25.10; 1.26.0-0 before 1.26.3
CVE-2026-42499
7.5
1%
May 7
Quadratic string concatenation in consumePhrase in net/mail
Affected: before 1.25.10; 1.26.0-0 before 1.26.3
CVE-2025-61725
7.5
1%
Oct 29
Excessive CPU consumption in ParseAddress in net/mail
Affected: before 1.24.8; 1.25.0 before 1.25.2
Showing 3