Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2025-61725

Excessive CPU consumption in ParseAddress in net/mail

Description

The ParseAddress function constructs domain-literal address components through repeated string concatenation. When parsing large domain-literal components, this can cause excessive CPU consumption.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Go standard library net/mail

Default version status: unaffected

  • 0 to < 1.24.8affected
  • 1.25.0 to < 1.25.2affected

References