wneessen vulnerabilities

Products

• github.com/wneessen/go-mail 1

Latest wneessen CVEs

Newest publication first

1. CVE-2025-59937 go-mail has insufficient address encoding when passing mail addresses to the SMTP client

   Published 2025-09-29

   High·CVSS 8.2 EPSS 0.54%

   go-mail is a comprehensive library for sending mails with Go. In versions 0.7.0 and below, due to incorrect handling of the mail.Address values when a sender- or recipient address is passed to the corresponding MAIL FROM or RCPT TO commands of the SMTP client, there is a possibil...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.