DoS via consumePhrase in Go net/mail RFC 5322 parsing <1.26.3
CVE-2026-42499 Published on May 7, 2026

Quadratic string concatenation in consumePhrase in net/mail
Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322.

NVD

Vulnerability Analysis

CVE-2026-42499 can be exploited with network access, and does not require authorization privileges or user interaction. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality and integrity, and a high impact on availability.

Attack Vector:

NETWORK

Attack Complexity:

LOW

Privileges Required:

NONE

User Interaction:

NONE

Scope:

UNCHANGED

Confidentiality Impact:

NONE

Integrity Impact:

NONE

Availability Impact:

HIGH

Weakness Type

Creation of Immutable Text Using String Concatenation

The software creates an immutable text string using string concatenation operations.

Products Associated with CVE-2026-42499

Want to know whenever a new CVE is published for Red Hat products? stack.watch will email you.

Red Hat Service Mesh

Red Hat Assisted Installer

Red Hat Cert Manager

Red Hat Confidential Compute Attestation

Red Hat Cryostat

Red Hat Openshift Custom Metrics Autoscaler

Red Hat External Secrets Operator

Red Hat Openshift File Integrity Operator

Red Hat Logging

Red Hat Lvms

Red Hat Migration Toolkit Applications

Red Hat Rhmt

Red Hat Multiarch Tuning Operator

Red Hat Network Observ Optr

Red Hat Openshift Api Data Protection

Red Hat Ocp Tools

Red Hat Openshift Lightspeed

Red Hat Openshift Pipelines

Red Hat Serverless

Red Hat Openshift Power Monitoring

Red Hat Advanced Cluster Security

Red Hat Ceph Storage

Red Hat Certifications

Red Hat Rhdh

Red Hat Enterprise Linux (RHEL)

Red Hat Hummingbird

Red Hat Openshift Ai

Red Hat Openshift Cluster Manager Cli

Red Hat Openshift

Red Hat Openshift Data Foundation

Red Hat Openshift Devspaces

Red Hat Devworkspace

Red Hat Openshift Distributed Tracing

Red Hat Windows Machine Config

Red Hat Openshift Gitops

Red Hat Container Native Virtualization

Red Hat Openstack

Red Hat Quay

Red Hat Service Interconnect

Red Hat Trusted Artifact Signer

Red Hat Openshift Security Profiles Operator

Red Hat Zero Trust Workload Identity Manager

Red Hat Gatekeeper

Red Hat Multicluster Engine

Red Hat Multicluster Globalhub

Red Hat Acm

Red Hat Ansible Automation Platform

Red Hat Edge Manager

Red Hat Enterprise Linux Ai

Red Hat Lightspeed For Runtimes

Red Hat Satellite

Red Hat Workload Availability Far

Red Hat Workload Availability Mdr

Red Hat Workload Availability Nhc

Red Hat Workload Availability Nmo

Red Hat Workload Availability Snr

Red Hat Workload Availability Sbr

Red Hat Enterprise Linux Eus

Red Hat Rhel E4s

Red Hat Rhel Eus

Red Hat Ext Dns Optr

Red Hat Rhel Tus

Affected Versions

Go standard library net/mail:

Before 1.25.10 is affected.
Version 1.26.0-0 and below 1.26.3 is affected.

Red Hat Ansible Automation Platform 2.5 for RHEL 8:

Version 0:2.5.10-7.el8ap and below * is unaffected.

Red Hat Ansible Automation Platform 2.5 for RHEL 9:

Version 0:2.6.17-2.el9ap and below * is unaffected.

Red Hat Ansible Automation Platform 2.6 for RHEL 9:

Version 0:2.6.17-2.el9ap and below * is unaffected.

Red Hat Enterprise Linux 10:

Version 0:1.26.3-4.el10_2 and below * is unaffected.

Red Hat Enterprise Linux 10:

Version 0:10.2.6-28.el10_2.5 and below * is unaffected.

Red Hat Enterprise Linux 10:

Version 2:1.43.1-5.el10_2 and below * is unaffected.

Red Hat Enterprise Linux 10:

Version 2:1.22.2-5.el10_2 and below * is unaffected.

Red Hat Enterprise Linux 10:

Version 0:0.152.1-2.el10_2 and below * is unaffected.

Red Hat Enterprise Linux 10:

Version 0:52.1-1.el10_2.2 and below * is unaffected.

Red Hat Enterprise Linux 10:

Version 0:165.1-3.el10_2.2 and below * is unaffected.

Red Hat Enterprise Linux 10.0 Extended Update Support:

Version 0:1.26.5-1.el10_0 and below * is unaffected.

Red Hat Enterprise Linux 10.0 Extended Update Support:

Version 0:2.21.0-3.el10_0.4 and below * is unaffected.

Red Hat Enterprise Linux 10.0 Extended Update Support:

Version 0:134.1-12.el10_0 and below * is unaffected.

Red Hat Enterprise Linux 10.0 Extended Update Support:

Version 0:10.2.6-26.el10_0 and below * is unaffected.

Red Hat Enterprise Linux 10.0 Extended Update Support:

Version 0:0.152.1-2.el10_0 and below * is unaffected.

Red Hat Enterprise Linux 8:

Version 8100020260518131104.a3795dee and below * is unaffected.

Red Hat Enterprise Linux 8:

Version 0:9.2.10-33.el8_10 and below * is unaffected.

Red Hat Enterprise Linux 8:

Version 8100020260901110702.afee755d and below * is unaffected.

Red Hat Enterprise Linux 8:

Version 0:101.5-3.el8_10 and below * is unaffected.

Red Hat Enterprise Linux 8.8 Telecommunications Update Service:

Version 0:75-10.el8_8 and below * is unaffected.

Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions:

Version 0:75-10.el8_8 and below * is unaffected.

Red Hat Enterprise Linux 9:

Version 0:1.26.3-1.el9_8 and below * is unaffected.

Red Hat Enterprise Linux 9:

Version 0:10.2.6-23.el9_8.3 and below * is unaffected.

Red Hat Enterprise Linux 9:

Version 0:0.152.1-2.el9_8 and below * is unaffected.

Red Hat Enterprise Linux 9:

Version 0:165.1-4.el9_8.1 and below * is unaffected.

Red Hat Enterprise Linux 9:

Version 0:52.1-1.el9_8.2 and below * is unaffected.

Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions:

Version 0:1.26.5-1.el9_2 and below * is unaffected.

Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions:

Version 0:76.1-9.el9_2 and below * is unaffected.

Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions:

Version 0:1.26.5-1.el9_4 and below * is unaffected.

Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions:

Version 0:101.3-4.el9_4.6 and below * is unaffected.

Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions:

Version 0:0.152.1-2.el9_4 and below * is unaffected.

Red Hat Enterprise Linux 9.6 Extended Update Support:

Version 0:1.26.5-1.el9_6 and below * is unaffected.

Red Hat Enterprise Linux 9.6 Extended Update Support:

Version 0:10.2.6-22.el9_6 and below * is unaffected.

Red Hat Enterprise Linux 9.6 Extended Update Support:

Version 0:132.2-12.el9_6 and below * is unaffected.

Red Hat Enterprise Linux 9.6 Extended Update Support:

Version 0:2.21.0-7.el9_6.1 and below * is unaffected.

Red Hat Enterprise Linux 9.6 Extended Update Support:

Version 0:0.152.1-2.el9_6 and below * is unaffected.

Red Hat OpenShift Container Platform 4.12:

Version 0:1.25.5-34.rhaos4.12.git6120b13.el8 and below * is unaffected.

Red Hat OpenShift Container Platform 4.12:

Version 0:4.12.0-202608131627.p2.g0e18cfc.assembly.stream.el8 and below * is unaffected.

Red Hat OpenShift Container Platform 4.13:

Version 0:1.26.5-32.rhaos4.13.git1088e36.el8 and below * is unaffected.

Red Hat OpenShift Container Platform 4.13:

Version 0:4.13.0-202608122150.p2.gbbc7c0c.assembly.stream.el8 and below * is unaffected.

Red Hat OpenShift Container Platform 4.14:

Version 0:1.27.8-19.rhaos4.14.gitcea2db1.el8 and below * is unaffected.

Red Hat OpenShift Container Platform 4.14:

Version 0:4.14.0-202608131802.p2.g9a7820e.assembly.stream.el8 and below * is unaffected.

Red Hat OpenShift Container Platform 4.15:

Version 0:1.28.11-14.rhaos4.15.gitf722b2f.el8 and below * is unaffected.

Red Hat OpenShift Container Platform 4.15:

Version 0:4.15.0-202608131733.p2.g5cb2ef4.assembly.stream.el8 and below * is unaffected.

Red Hat OpenShift Container Platform 4.15:

Version 0:4.15.0-202608131733.p2.g8231637.assembly.stream.el8 and below * is unaffected.

Red Hat OpenShift Container Platform 4.15:

Version 0:4.15.0-202608131733.p2.gfd77d92.assembly.stream.el8 and below * is unaffected.

Red Hat OpenShift Container Platform 4.15:

Version 0:4.15.0-202608131733.p2.g5638728.assembly.stream.el8 and below * is unaffected.

Red Hat OpenShift Container Platform 4.15:

Version 0:4.15.0-202608131733.p2.gfc50272.assembly.stream.el8 and below * is unaffected.

Red Hat OpenShift Container Platform 4.16:

Version 0:1.29.13-12.rhaos4.16.git979a5e6.el8 and below * is unaffected.

Red Hat OpenShift Container Platform 4.16:

Version 0:4.16.0-202608111505.p2.g41c4e9b.assembly.stream.el8 and below * is unaffected.

Red Hat OpenShift Container Platform 4.16:

Version 0:4.16.0-202608111505.p2.g6f88b58.assembly.stream.el8 and below * is unaffected.

Red Hat OpenShift Container Platform 4.16:

Version 0:4.16.0-202608111505.p2.ga53e9de.assembly.stream.el8 and below * is unaffected.

Red Hat OpenShift Container Platform 4.16:

Version 0:4.16.0-202608111505.p2.ga3ebdc0.assembly.stream.el8 and below * is unaffected.

Red Hat OpenShift Container Platform 4.16:

Version 0:4.16.0-202608111505.p2.g26b43df.assembly.stream.el8 and below * is unaffected.

Red Hat OpenShift Container Platform 4.16:

Version 0:4.16.69-202608202336.p0.g763478c.assembly.4.16.69.el9 and below * is unaffected.

Red Hat OpenShift Container Platform 4.17:

Version 0:1.30.14-11.rhaos4.17.git1e2a16d.el8 and below * is unaffected.

Red Hat OpenShift Container Platform 4.17:

Version 0:4.17.0-202608132055.p2.g4e295fa.assembly.stream.el8 and below * is unaffected.

Red Hat OpenShift Container Platform 4.17:

Version 0:4.17.0-202608201812.p2.g7189593.assembly.stream.el8 and below * is unaffected.

Red Hat OpenShift Container Platform 4.17:

Version 0:4.17.0-202608122146.p2.g144bace.assembly.stream.el8 and below * is unaffected.

Red Hat OpenShift Container Platform 4.17:

Version 0:4.17.0-202608122146.p2.g5bcfbfd.assembly.stream.el8 and below * is unaffected.

Red Hat OpenShift Container Platform 4.17:

Version 0:4.17.0-202608122146.p2.g8ce997d.assembly.stream.el8 and below * is unaffected.

Red Hat OpenShift Container Platform 4.18:

Version 0:1.31.13-11.rhaos4.18.git817a650.el9 and below * is unaffected.

Red Hat OpenShift Container Platform 4.18:

Version 0:4.18.0-202608132034.p2.g91c2408.assembly.stream.el8 and below * is unaffected.

Red Hat OpenShift Container Platform 4.18:

Version 0:4.18.0-202608132034.p2.g6febe61.assembly.stream.el8 and below * is unaffected.

Red Hat OpenShift Container Platform 4.18:

Version 0:4.18.0-202608121933.p2.gc395190.assembly.stream.el8 and below * is unaffected.

Red Hat OpenShift Container Platform 4.18:

Version 0:4.18.0-202608121933.p2.g9795abd.assembly.stream.el8 and below * is unaffected.

Red Hat OpenShift Container Platform 4.18:

Version 0:4.18.0-202608121933.p2.g6ea2356.assembly.stream.el8 and below * is unaffected.

Red Hat OpenShift Container Platform 4.18:

Version 0:4.18.54-202608211117.p0.g8eb6c29.assembly.4.18.54.el9 and below * is unaffected.

Red Hat OpenShift Container Platform 4.19:

Version 0:1.32.13-9.rhaos4.19.git2100f27.el9 and below * is unaffected.

Red Hat OpenShift Container Platform 4.19:

Version 0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9 and below * is unaffected.

Red Hat OpenShift Container Platform 4.19:

Version 0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8 and below * is unaffected.

Red Hat OpenShift Container Platform 4.19:

Version 0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9 and below * is unaffected.

Red Hat OpenShift Container Platform 4.19:

Version 0:4.19.46-202609041024.p0.g59e34c7.assembly.4.19.46.el9 and below * is unaffected.

Red Hat RHEM 1.1 for RHEL 10:

Version 0:1.1.4-1.el10em and below * is unaffected.

Red Hat RHEM 1.1 for RHEL 9:

Version 0:1.1.4-1.el9em and below * is unaffected.

Cert Manager support for Red Hat OpenShift release 1.19:

Version 1786613805 and below * is unaffected.

Logging for Red Hat OpenShift 6:

Version 1785419067 and below * is unaffected.

Logging for Red Hat OpenShift 6.2:

Version 1784748010 and below * is unaffected.

Logging Subsystem for Red Hat OpenShift 6.4:

Version 1782405469 and below * is unaffected.

Logging Subsystem for Red Hat OpenShift 6.5:

Version 1786645248 and below * is unaffected.

Red Hat multicluster engine for Kubernetes 2.11:

Version 1786911952 and below * is unaffected.

Red Hat multicluster engine for Kubernetes 2.11:

Version 1786912006 and below * is unaffected.

Red Hat OpenShift API for Data Protection 1.3:

Version 1785177357 and below * is unaffected.

Red Hat OpenShift API for Data Protection 1.4:

Version 1786946116 and below * is unaffected.

Red Hat OpenShift API for Data Protection 1.5:

Version 1788860461 and below * is unaffected.

Red Hat OpenShift API for Data Protection 1.6:

Version 1784058822 and below * is unaffected.

Red Hat Advanced Cluster Security 4.9:

Version 1783357116 and below * is unaffected.

Red Hat Advanced Cluster Security for Kubernetes 4.10:

Version 1783357140 and below * is unaffected.

Red Hat Developer Hub 1.10:

Version 1783447707 and below * is unaffected.

Red Hat Developer Hub 1.9:

Version 1782767215 and below * is unaffected.

Red Hat Hardened Images:

Version 1.25.10-2.2.hum1 and below * is unaffected.

Red Hat Hardened Images:

Version 1.26.3-2.2.hum1 and below * is unaffected.

Red Hat Migration Toolkit 1.8:

Version 1783953372 and below * is unaffected.

Red Hat Migration Toolkit for Applications 8.1:

Version 1785171639 and below * is unaffected.

Red Hat Migration Toolkit for Applications 8.2:

Version 1784211378 and below * is unaffected.

Red Hat OpenShift AI 2.25:

Version 1783544461 and below * is unaffected.

Red Hat OpenShift AI 3.4:

Version 1787102977 and below * is unaffected.

Red Hat OpenShift AI 3.4:

Version 1786611759 and below * is unaffected.

Red Hat OpenShift AI 3.4:

Version 1787562200 and below * is unaffected.

Red Hat OpenShift Container Platform 4.12:

Version 1786752886 and below * is unaffected.

Red Hat OpenShift Container Platform 4.14:

Version 1787002807 and below * is unaffected.

Red Hat OpenShift Container Platform 4.15:

Version 1787055135 and below * is unaffected.

Red Hat OpenShift Container Platform 4.16:

Version 1786788280 and below * is unaffected.

Red Hat OpenShift Container Platform 4.17:

Version 1787549445 and below * is unaffected.

Red Hat OpenShift Container Platform 4.18:

Version 1786754308 and below * is unaffected.

Red Hat OpenShift Container Platform 4.19:

Version 1786489910 and below * is unaffected.

Red Hat OpenShift Container Platform 4.20:

Version 1786494900 and below * is unaffected.

Red Hat OpenShift Container Platform 4.21:

Version 1786496647 and below * is unaffected.

Red Hat OpenShift Container Platform 4.21:

Version 1786573075 and below * is unaffected.

Red Hat OpenShift Dev Spaces 3.30:

Version 1787756267 and below * is unaffected.

Red Hat OpenShift Dev Spaces 3.30:

Version 1787756799 and below * is unaffected.

Red Hat OpenShift Service Mesh 3.0:

Version 1782222217 and below * is unaffected.

Red Hat OpenShift Service Mesh 3.0:

Version 1782223341 and below * is unaffected.

Red Hat OpenShift Service Mesh 3.0:

Version 1782296193 and below * is unaffected.

Red Hat OpenShift Service Mesh 3.0:

Version 1782222607 and below * is unaffected.

Red Hat OpenShift Service Mesh 3.1:

Version 1782222163 and below * is unaffected.

Red Hat OpenShift Service Mesh 3.1:

Version 1782223138 and below * is unaffected.

Red Hat OpenShift Service Mesh 3.1:

Version 1782222394 and below * is unaffected.

Red Hat OpenShift Service Mesh 3.1:

Version 1782222451 and below * is unaffected.

Red Hat OpenShift Service Mesh 3.2:

Version 1782226178 and below * is unaffected.

Red Hat OpenShift Service Mesh 3.2:

Version 1782224487 and below * is unaffected.

Red Hat OpenShift Service Mesh 3.2:

Version 1782303211 and below * is unaffected.

Red Hat OpenShift Service Mesh 3.2:

Version 1782224541 and below * is unaffected.

Red Hat OpenShift Service Mesh 3.3:

Version 1782223045 and below * is unaffected.

Red Hat OpenShift Service Mesh 3.3:

Version 1782222366 and below * is unaffected.

Red Hat OpenShift Service Mesh 3.3:

Version 1782310747 and below * is unaffected.

Red Hat OpenShift Service Mesh 3.3:

Version 1782222038 and below * is unaffected.

Red Hat OpenShift Workload Availability 0.12:

Version 1785202723 and below * is unaffected.

Red Hat OpenShift Workload Availability 0.13:

Version 1785203036 and below * is unaffected.

Red Hat OpenShift Workload Availability 0.3:

Version 1785203474 and below * is unaffected.

Red Hat OpenShift Workload Availability 0.7:

Version 1785203508 and below * is unaffected.

Red Hat OpenShift Workload Availability 0.8:

Version 1785203079 and below * is unaffected.

Red Hat OpenShift Workload Availability 5.7:

Version 1785202847 and below * is unaffected.

Red Hat Quay 3.10:

Version 1783750447 and below * is unaffected.

Red Hat Quay 3.12:

Version 1783751865 and below * is unaffected.
Version 1784353904 and below * is unaffected.

Red Hat Quay 3.15:

Version 1784351966 and below * is unaffected.

Red Hat Quay 3.16:

Version 1783955846 and below * is unaffected.

Red Hat Quay 3.9:

Version 1784125838 and below * is unaffected.

Red Hat Trusted Artifact Signer 1.4:

Version 4-1.4.2 and below * is unaffected.
Version 4-1.4.3 and below * is unaffected.

Assisted Installer for Red Hat OpenShift Container Platform 2: Red Hat Confidential Compute Attestation: Red Hat Confidential Compute Attestation: Red Hat Confidential Compute Attestation: Red Hat Cryostat 4: Custom Metric Autoscaler operator for Red Hat Openshift: Red Hat ExternalDNS Operator: Red Hat ExternalDNS Operator: External Secrets Operator for Red Hat OpenShift: Red Hat File Integrity Operator: Red Hat Gatekeeper 3: Red Hat Logical Volume Manager Storage: Red Hat Logical Volume Manager Storage: Red Hat Logical Volume Manager Storage: Red Hat Multiarch Tuning Operator: Red Hat Multicluster Engine for Kubernetes: Red Hat Multicluster Engine for Kubernetes: Red Hat Multicluster Engine for Kubernetes: Red Hat Multicluster Engine for Kubernetes: Red Hat Multicluster Engine for Kubernetes: Red Hat Multicluster Engine for Kubernetes: Red Hat Multicluster Engine for Kubernetes: Red Hat Multicluster Engine for Kubernetes: Red Hat Multicluster Engine for Kubernetes: Red Hat Multicluster Engine for Kubernetes: Red Hat Multicluster Engine for Kubernetes: Red Hat Multicluster Global Hub: Red Hat Multicluster Global Hub: Red Hat Network Observability Operator: Red Hat OpenShift Developer Tools and Services: Red Hat OpenShift Lightspeed: Red Hat OpenShift Pipelines: Red Hat OpenShift Serverless: Red Hat OpenShift Service Mesh 2: Red Hat OpenShift Service Mesh 2: Red Hat OpenShift Service Mesh 3: Power monitoring for Red Hat OpenShift: Red Hat Advanced Cluster Management for Kubernetes 2: Red Hat Advanced Cluster Management for Kubernetes 2: Red Hat Advanced Cluster Management for Kubernetes 2: Red Hat Advanced Cluster Management for Kubernetes 2: Red Hat Advanced Cluster Management for Kubernetes 2: Red Hat Advanced Cluster Management for Kubernetes 2: Red Hat Ansible Automation Platform 2: Red Hat Ansible Automation Platform 2: Red Hat Ansible Automation Platform 2: Red Hat Ceph Storage 5: Red Hat Ceph Storage 6: Red Hat Ceph Storage 9: Red Hat Certification Program for Red Hat Enterprise Linux 9: Red Hat Edge Manager 1: Red Hat Enterprise Linux 10: Red Hat Enterprise Linux 10: Red Hat Enterprise Linux 10: Red Hat Enterprise Linux 10: Red Hat Enterprise Linux 10: Red Hat Enterprise Linux 9: Red Hat Enterprise Linux 9: Red Hat Enterprise Linux 9: Red Hat Enterprise Linux 9: Red Hat Enterprise Linux 9: Red Hat Enterprise Linux 9: Red Hat Enterprise Linux 9: Red Hat Enterprise Linux 9: Red Hat Enterprise Linux AI (RHEL AI) 3: Red Hat Lightspeed for Runtimes Operator: Red Hat OpenShift AI (RHOAI): Red Hat OpenShift AI (RHOAI): Red Hat OpenShift AI (RHOAI): Red Hat OpenShift AI (RHOAI): Red Hat OpenShift AI (RHOAI): Red Hat OpenShift AI (RHOAI): Red Hat OpenShift AI (RHOAI): Red Hat OpenShift AI (RHOAI): Red Hat OpenShift AI (RHOAI): Red Hat OpenShift AI (RHOAI): Red Hat OpenShift AI (RHOAI): Red Hat OpenShift AI (RHOAI): Red Hat OpenShift AI (RHOAI): Red Hat OpenShift AI (RHOAI): Red Hat OpenShift AI (RHOAI): Red Hat OpenShift AI (RHOAI): Red Hat OpenShift AI (RHOAI): Red Hat OpenShift AI (RHOAI): Red Hat OpenShift AI (RHOAI): Red Hat OpenShift Cluster Manager CLI: Red Hat OpenShift Container Platform 4: Red Hat OpenShift Container Platform 4: Red Hat OpenShift Container Platform 4: Red Hat OpenShift Container Platform 4: Red Hat OpenShift Container Platform 4: Red Hat OpenShift Container Platform 4: Red Hat OpenShift Container Platform 4: Red Hat OpenShift Container Platform 4: Red Hat Openshift Data Foundation 4: Red Hat Openshift Data Foundation 4: Red Hat Openshift Data Foundation 4: Red Hat Openshift Data Foundation 4: Red Hat Openshift Data Foundation 4: Red Hat OpenShift Dev Workspaces Operator: Red Hat OpenShift distributed tracing 3: Red Hat OpenShift for Windows Containers: Red Hat OpenShift GitOps: Red Hat OpenShift GitOps: Red Hat OpenShift Virtualization 4: Red Hat OpenShift Virtualization 4: Red Hat OpenShift Virtualization 4: Red Hat OpenShift Virtualization 4: Red Hat OpenStack Platform 16.2: Red Hat OpenStack Platform 17.1: Red Hat OpenStack Platform 18.0: Red Hat Quay 3: Red Hat Satellite 6: Red Hat Service Interconnect 1: Red Hat Service Interconnect 2: Red Hat Security Profiles Operator: Red Hat Zero Trust Workload Identity Manager: Red Hat Zero Trust Workload Identity Manager - Tech Preview:

Exploit Probability

EPSS

0.80%

Percentile

52.76%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.

DoS via consumePhrase in Go net/mail RFC 5322 parsing <1.26.3CVE-2026-42499 Published on May 7, 2026

Vulnerability Analysis

Weakness Type

Creation of Immutable Text Using String Concatenation

Products Associated with CVE-2026-42499

Affected Versions

Exploit Probability

DoS via consumePhrase in Go net/mail RFC 5322 parsing <1.26.3
CVE-2026-42499 Published on May 7, 2026