Go/github.com/wneessen/go-mail CVE-2025-59937: critical 9.1, EPSS 0.54%
go-mail has insufficient address encoding when passing mail addresses to the SMTP client
Action: Upgrade github.com/wneessen/go-mail to 0.7.1 or later.
go get github.com/wneessen/go-mail@v0.7.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.7.1 | - |
Fixed versions
| 0.7.1 |
Sources
- osv: GHSA-wpwj-69cm-q9c5
- nvd: CVE-2025-59937
- https://github.com/wneessen/go-mail/security/advisories/GHSA-wpwj-69cm-q9c5
- https://github.com/wneessen/go-mail/issues/495
- https://github.com/wneessen/go-mail/pull/496
- https://github.com/wneessen/go-mail/commit/42e92cfe027be04aff72921adb0f72f11d517479
- https://github.com/wneessen/go-mail
- https://pkg.go.dev/vuln/GO-2025-3988
CVE-2025-59937 · published · modified · JSON