Go net/mail Package Excessive Resource Consumption Vulnerability

A vulnerability exists in the Go programming language's net/mail package, specifically in versions prior to 1.25.10 and between 1.26.0 and 1.26.3. This vulnerability allows well-crafted inputs to the ParseAddress, ParseAddressList, and ParseDate functions to cause excessive CPU usage and memory allocation, leading to potential denial-of-service conditions.

Impact

Exploitation of this vulnerability can cause excessive CPU exhaustion and memory allocations, leading to potential denial-of-service conditions.

Remediation

Users can upgrade to Go versions 1.25.10 or 1.26.3 to address this vulnerability.