CVE-2026-55619

eml_parser serves as a python module for parsing eml files and returning various information found in the e-mail as well as computed information. Prior to 3.0.2, eml_parser.parser.HeaderParser.header_fetch_parse in eml_parser/parser.py uses email.utils.getaddresses() to parse address-bearing e-mail headers. A deeply nested CFWS comment construct exhausts the standard-library recursive descent parser's call stack and raises RecursionError, which is not caught and therefore aborts parsing of the entire message. An attacker can disrupt SOC pipelines that process untrusted EML files, although callers already need to handle exceptions from malformed or pathological messages. This issue is fixed in version 3.0.2.

• CWE-770
• CWE-1124

• https://github.com/GOVCERT-LU/eml_parser/commit/746a69f86443eb0b6a47f77db3cfe727c21f92b3
• https://github.com/GOVCERT-LU/eml_parser/pull/90
• https://github.com/GOVCERT-LU/eml_parser/releases/tag/v3.0.2
• https://github.com/GOVCERT-LU/eml_parser/security/advisories/GHSA-m66c-fw79-6359

Published

Aug 25, 2026

Last Modified

Sep 9, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-55610InvoiceShelf is an open-source web & mobile app that helps t…8.7
• CVE-2026-55611AnythingLLM is an application that turns pieces of content i…0
• CVE-2026-55615Langroid is a framework for building large-language-model-po…9.2
• CVE-2026-55616Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMB…
• CVE-2026-55617Hydro is a next-generation high-performance online judge pla…6.9
• CVE-2026-55618eml_parser serves as a python module for parsing eml files a…6.5
• CVE-2026-5562A vulnerability was identified in provectus kafka-ui up to 0…9.8
• CVE-2026-55620eml_parser serves as a python module for parsing eml files a…7.5
• CVE-2026-55621Incus is a system container and virtual machine manager. Pri…7.7
• CVE-2026-55622Incus is a system container and virtual machine manager. Pri…7.7
• CVE-2026-55623Rejected reason: This CVE is a duplicate of another CVE.
• CVE-2026-55624MintyItanium Lost-Auction is an auction plugin for Minecraft…5.3