Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade goUpgrade rclone | May 20, 2026 | May 7, 2026 |
| Amazon Linux Ami 2 | — | Upgrade cni-plugins-debuginfoUpgrade cri-toolsUpgrade containerdUpgrade containerd-debuginfoUpgrade golangUpgrade amazon-cloudwatch-agentUpgrade golistUpgrade golang-miscUpgrade docker-debuginfoUpgrade rcloneUpgrade amazon-ecr-credential-helperUpgrade golist-debuginfoUpgrade runfinch-finchUpgrade runc-debuginfoUpgrade golang-srcUpgrade oci-add-hooks-debuginfoUpgrade golang-sharedUpgrade oci-add-hooksUpgrade nerdctl-debuginfoUpgrade golang-docsUpgrade cni-pluginsUpgrade nerdctlUpgrade ecs-initUpgrade dockerUpgrade golang-testsUpgrade golang-binUpgrade rclone-debuginfoUpgrade cri-tools-debuginfoUpgrade containerd-stressUpgrade amazon-ecr-credential-helper-debuginfoUpgrade runcUpgrade soci-snapshotter | Jun 8, 2026 | Jun 8, 2026 |
| Amazon_linux_2023 | — | Upgrade docker-debugsourceUpgrade golang-srcUpgrade soci-snapshotterUpgrade docker-debuginfoUpgrade containerd-stress-debuginfoUpgrade golistUpgrade golang-miscUpgrade golist-debugsourceUpgrade oci-add-hooksUpgrade runfinch-finchUpgrade rcloneUpgrade yqUpgrade runc-debugsourceUpgrade dockerUpgrade golangUpgrade golang-testsUpgrade containerd-stressUpgrade containerdUpgrade yq-debuginfoUpgrade golist-debuginfoUpgrade runcUpgrade oci-add-hooks-debugsourceUpgrade golang-docsUpgrade yq-debugsourceUpgrade containerd-debugsourceUpgrade amazon-ecr-credential-helperUpgrade golang-binUpgrade rclone-debuginfoUpgrade oci-add-hooks-debuginfoUpgrade runc-debuginfoUpgrade nerdctlUpgrade rclone-debugsourceUpgrade golang-sharedUpgrade containerd-debuginfoUpgrade credentials-fetcherUpgrade ecs-init | May 28, 2026 | May 7, 2026 |
| Oracle_linux | — | Upgrade golang-docsUpgrade golang-srcUpgrade golangUpgrade go-toolsetUpgrade golang-miscUpgrade golang-testsUpgrade golang-binUpgrade delveUpgrade golang-race | Jun 5, 2026 | May 7, 2026 |
| Redhat Openshift | — | Upgrade ose-azure-acr-image-credential-providerUpgrade ose-gcp-gcr-image-credential-providerUpgrade ose-aws-ecr-image-credential-providerUpgrade microshiftUpgrade cri-oUpgrade openshift-clientsUpgrade openshift | Aug 20, 2026 | May 7, 2026 |
| Redhat_linux | — | Upgrade golang-raceUpgrade containers-commonUpgrade criu-libsUpgrade delveUpgrade flightctl-observabilityUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade grafanaUpgrade osbuild-composer-core-debuginfoUpgrade buildah-tests-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade delve-debuginfoUpgrade libslirpUpgrade criu-debugsourceUpgrade osbuild-composer-dnf-jsonUpgrade python3-criuUpgrade podman-gvproxyUpgrade golang-srcUpgrade podman-remote-debuginfoUpgrade podman-testsUpgrade osbuild-composer-tests-debuginfoUpgrade skopeo-testsUpgrade osbuild-composer-coreUpgrade slirp4netns-debuginfoUpgrade container-selinuxUpgrade flightctl-cliUpgrade golang-miscUpgrade runc-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade criu-develUpgrade podman-debugsourceUpgrade conmonUpgrade ignition-validateUpgrade opentelemetry-collectorUpgrade podman-pluginsUpgrade python3-podmanUpgrade slirp4netnsUpgrade toolbox-debuginfoUpgrade skopeo-debuginfoUpgrade osbuild-composer-debuginfoUpgrade ignition-grubUpgrade libslirp-develUpgrade oci-seccomp-bpf-hookUpgrade conmon-debuginfoUpgrade runc-debuginfoUpgrade libslirp-debugsourceUpgrade image-builder-debugsourceUpgrade crun-debuginfoUpgrade go-toolsetUpgrade fuse-overlayfs-debugsourceUpgrade podman-plugins-debuginfoUpgrade cockpit-podmanUpgrade grafana-debugsourceUpgrade flightctl-agentUpgrade slirp4netns-debugsourceUpgrade crun-debugsourceUpgrade podman-catatonit-debuginfoUpgrade delve-debugsourceUpgrade buildah-debugsourceUpgrade osbuild-composer-worker-debuginfoUpgrade podmanUpgrade golang-testsUpgrade image-builderUpgrade ignition-debugsourceUpgrade flightctl-selinuxUpgrade podman-catatonitUpgrade podman-dockerUpgrade criu-debuginfoUpgrade runcUpgrade osbuild-composerUpgrade ignition-validate-debuginfoUpgrade containernetworking-pluginsUpgrade udicaUpgrade toolbox-testsNo solution existsUpgrade ignition-debuginfoUpgrade skopeoUpgrade skopeo-debugsourceUpgrade toolboxUpgrade criu-libs-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade critUpgrade buildah-debuginfoUpgrade toolbox-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade golangUpgrade osbuild-composer-workerUpgrade buildahUpgrade grafana-debuginfoUpgrade golang-binUpgrade grafana-selinuxUpgrade podman-remoteUpgrade podman-debuginfoUpgrade netavarkUpgrade golang-docsUpgrade ignitionUpgrade fuse-overlayfs-debuginfoUpgrade crunUpgrade libslirp-debuginfoUpgrade osbuild-composer-debugsourceUpgrade buildah-testsUpgrade image-builder-debuginfoUpgrade ignition-edgeUpgrade fuse-overlayfsUpgrade criuUpgrade flightctl-servicesUpgrade conmon-debugsourceUpgrade aardvark-dnsUpgrade podman-tests-debuginfo | Jul 17, 2026 | May 7, 2026 |
| Rocky_linux | — | Upgrade podman-debugsourceUpgrade osbuild-composer-workerUpgrade podman-gvproxy-debuginfoUpgrade podman-remote-debuginfoUpgrade criu-libs-debuginfoUpgrade python3-criuUpgrade osbuild-composer-worker-debuginfoUpgrade libslirp-debugsourceUpgrade criu-libsUpgrade oci-seccomp-bpf-hookUpgrade critUpgrade grafana-debugsourceUpgrade go-toolsetUpgrade slirp4netns-debuginfoUpgrade libslirp-debuginfoUpgrade osbuild-composerUpgrade podman-plugins-debuginfoUpgrade podman-debuginfoUpgrade crun-debuginfoUpgrade osbuild-composer-debuginfoUpgrade opentelemetry-collectorUpgrade osbuild-composer-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-testsUpgrade toolbox-debuginfoUpgrade criu-develUpgrade delveUpgrade containernetworking-plugins-debuginfoUpgrade image-builderUpgrade containers-commonUpgrade slirp4netns-debugsourceUpgrade crunUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade skopeo-testsUpgrade podman-catatonit-debuginfoUpgrade crun-debugsourceUpgrade podman-pluginsUpgrade libslirp-develUpgrade podman-remoteUpgrade runcUpgrade image-builder-debuginfoUpgrade runc-debuginfoUpgrade buildah-debugsourceUpgrade grafanaUpgrade podmanUpgrade golangUpgrade conmon-debuginfoUpgrade aardvark-dnsUpgrade golang-raceUpgrade fuse-overlayfs-debugsourceUpgrade toolboxUpgrade grafana-debuginfoUpgrade slirp4netnsUpgrade buildah-testsUpgrade toolbox-debugsourceUpgrade grafana-selinuxUpgrade delve-debugsourceUpgrade skopeo-debuginfoUpgrade skopeoUpgrade podman-gvproxyUpgrade fuse-overlayfsUpgrade criu-debuginfoUpgrade criuUpgrade buildah-debuginfoUpgrade osbuild-composer-core-debuginfoUpgrade golang-binUpgrade fuse-overlayfs-debuginfoUpgrade conmon-debugsourceUpgrade criu-debugsourceUpgrade netavarkUpgrade image-builder-debugsourceUpgrade podman-catatonitUpgrade conmonUpgrade toolbox-testsUpgrade buildah-tests-debuginfoUpgrade delve-debuginfoUpgrade containernetworking-pluginsUpgrade skopeo-debugsourceUpgrade runc-debugsourceUpgrade buildahUpgrade osbuild-composer-coreUpgrade libslirp | Aug 27, 2026 | Aug 26, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jun 15, 2026 | May 7, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub