data/osv/GO-2025-3988.json

{
  "schema_version": "1.3.1",
  "id": "GO-2025-3988",
  "modified": "0001-01-01T00:00:00Z",
  "published": "0001-01-01T00:00:00Z",
  "aliases": [
    "CVE-2025-59937",
    "GHSA-wpwj-69cm-q9c5"
  ],
  "summary": "Insufficient address encoding when passing mail addresses to the SMTP client in github.com/wneessen/go-mail",
  "details": "Insufficient address encoding when passing mail addresses to the SMTP client in github.com/wneessen/go-mail",
  "affected": [
    {
      "package": {
        "name": "github.com/wneessen/go-mail",
        "ecosystem": "Go"
      },
      "ranges": [
        {
          "type": "SEMVER",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.7.1"
            }
          ]
        }
      ],
      "ecosystem_specific": {
        "imports": [
          {
            "path": "github.com/wneessen/go-mail",
            "symbols": [
              "Client.Close",
              "Client.CloseWithSMTPClient",
              "Client.DialAndSend",
              "Client.DialAndSendWithContext",
              "Client.DialToSMTPClientWithContext",
              "Client.DialWithContext",
              "Client.Reset",
              "Client.ResetWithSMTPClient",
              "Client.Send",
              "Client.SendWithSMTPClient",
              "Client.ServerAddr",
              "EMLToMsgFromFile",
              "EMLToMsgFromReader",
              "EMLToMsgFromString",
              "Msg.AddAlternativeHTMLTemplate",
              "Msg.AddAlternativeTextTemplate",
              "Msg.AddBcc",
              "Msg.AddBccFormat",
              "Msg.AddCc",
              "Msg.AddCcFormat",
              "Msg.AddTo",
              "Msg.AddToFormat",
              "Msg.AttachFile",
              "Msg.AttachFromEmbedFS",
              "Msg.AttachFromIOFS",
              "Msg.AttachHTMLTemplate",
              "Msg.AttachReadSeeker",
              "Msg.AttachReader",
              "Msg.AttachTextTemplate",
              "Msg.Bcc",
              "Msg.BccFromString",
              "Msg.BccIgnoreInvalid",
              "Msg.Cc",
              "Msg.CcFromString",
              "Msg.CcIgnoreInvalid",
              "Msg.EmbedFile",
              "Msg.EmbedFromEmbedFS",
              "Msg.EmbedFromIOFS",
              "Msg.EmbedHTMLTemplate",
              "Msg.EmbedReadSeeker",
              "Msg.EmbedReader",
              "Msg.EmbedTextTemplate",
              "Msg.EnvelopeFrom",
              "Msg.EnvelopeFromFormat",
              "Msg.From",
              "Msg.FromFormat",
              "Msg.GetAddrHeaderString",
              "Msg.GetBccString",
              "Msg.GetCcString",
              "Msg.GetFromString",
              "Msg.GetRecipients",
              "Msg.GetSender",
              "Msg.GetToString",
              "Msg.NewReader",
              "Msg.ReplyTo",
              "Msg.ReplyToFormat",
              "Msg.RequestMDNAddTo",
              "Msg.RequestMDNAddToFormat",
              "Msg.RequestMDNTo",
              "Msg.RequestMDNToFormat",
              "Msg.SetAddrHeader",
              "Msg.SetAddrHeaderIgnoreInvalid",
              "Msg.SetBodyHTMLTemplate",
              "Msg.SetBodyTextTemplate",
              "Msg.SetBulk",
              "Msg.SetDate",
              "Msg.SetDateWithValue",
              "Msg.SetGenHeader",
              "Msg.SetHeader",
              "Msg.SetImportance",
              "Msg.SetMessageID",
              "Msg.SetMessageIDWithValue",
              "Msg.SetOrganization",
              "Msg.SetUserAgent",
              "Msg.SignWithTLSCertificate",
              "Msg.Subject",
              "Msg.To",
              "Msg.ToFromString",
              "Msg.ToIgnoreInvalid",
              "Msg.UpdateReader",
              "Msg.Write",
              "Msg.WriteTo",
              "Msg.WriteToFile",
              "Msg.WriteToSendmail",
              "Msg.WriteToSendmailWithCommand",
              "Msg.WriteToSendmailWithContext",
              "Msg.WriteToSkipMiddleware",
              "Msg.WriteToTempFile",
              "NewClient",
              "Part.GetContent",
              "QuickSend",
              "SMTPAuthType.UnmarshalString",
              "SendError.Error",
              "base64LineBreaker.Close",
              "base64LineBreaker.Write",
              "msgWriter.Write",
              "parseMultiPartHeader",
              "parseMultiPartHeader"
            ]
          },
          {
            "path": "github.com/wneessen/go-mail/smtp",
            "symbols": [
              "Client.Mail",
              "Client.Rcpt",
              "Client.TLSConnectionState",
              "DataCloser.Write",
              "SendMail"
            ]
          }
        ]
      }
    }
  ],
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://github.com/wneessen/go-mail/security/advisories/GHSA-wpwj-69cm-q9c5"
    },
    {
      "type": "FIX",
      "url": "https://github.com/wneessen/go-mail/commit/42e92cfe027be04aff72921adb0f72f11d517479"
    },
    {
      "type": "FIX",
      "url": "https://github.com/wneessen/go-mail/pull/496"
    },
    {
      "type": "REPORT",
      "url": "https://github.com/wneessen/go-mail/issues/495"
    }
  ],
  "database_specific": {
    "url": "https://pkg.go.dev/vuln/GO-2025-3988",
    "review_status": "REVIEWED"
  }
}