Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade rcloneUpgrade go | May 20, 2026 | May 7, 2026 |
| Amazon Linux Ami 2 | — | Upgrade golang-testsUpgrade ecs-initUpgrade dockerUpgrade containerd-stressUpgrade golang-binUpgrade rclone-debuginfoUpgrade nerdctlUpgrade cri-tools-debuginfoUpgrade amazon-ecr-credential-helper-debuginfoUpgrade runcUpgrade soci-snapshotterUpgrade cni-pluginsUpgrade nerdctl-debuginfoUpgrade golang-docsUpgrade docker-debuginfoUpgrade amazon-ecr-credential-helperUpgrade containerd-debuginfoUpgrade golangUpgrade amazon-cloudwatch-agentUpgrade runc-debuginfoUpgrade cri-toolsUpgrade cni-plugins-debuginfoUpgrade golist-debuginfoUpgrade containerdUpgrade runfinch-finchUpgrade golang-sharedUpgrade rcloneUpgrade oci-add-hooksUpgrade golang-srcUpgrade oci-add-hooks-debuginfoUpgrade golang-miscUpgrade golist | Jun 8, 2026 | Jun 8, 2026 |
| Amazon_linux_2023 | — | Upgrade yq-debuginfoUpgrade golist-debuginfoUpgrade oci-add-hooks-debuginfoUpgrade runcUpgrade golang-docsUpgrade containerd-debuginfoUpgrade oci-add-hooks-debugsourceUpgrade nerdctlUpgrade containerd-stressUpgrade yq-debugsourceUpgrade amazon-ecr-credential-helperUpgrade golang-sharedUpgrade containerd-debugsourceUpgrade golang-binUpgrade rclone-debugsourceUpgrade containerdUpgrade rclone-debuginfoUpgrade runc-debuginfoUpgrade credentials-fetcherUpgrade ecs-initUpgrade runc-debugsourceUpgrade golang-testsUpgrade oci-add-hooksUpgrade docker-debugsourceUpgrade dockerUpgrade golist-debugsourceUpgrade golangUpgrade yqUpgrade golang-miscUpgrade golistUpgrade docker-debuginfoUpgrade runfinch-finchUpgrade soci-snapshotterUpgrade rcloneUpgrade golang-srcUpgrade containerd-stress-debuginfo | May 28, 2026 | May 7, 2026 |
| Oracle_linux | — | Upgrade golang-srcUpgrade golang-docsUpgrade go-toolsetUpgrade golangUpgrade golang-miscUpgrade golang-binUpgrade golang-raceUpgrade golang-testsUpgrade delve | Jun 5, 2026 | May 7, 2026 |
| Redhat Openshift | — | Upgrade ose-gcp-gcr-image-credential-providerUpgrade ose-aws-ecr-image-credential-providerUpgrade ose-azure-acr-image-credential-providerUpgrade microshiftUpgrade cri-oUpgrade openshift-clientsUpgrade openshift | Aug 20, 2026 | May 7, 2026 |
| Redhat_linux | — | Upgrade podman-testsUpgrade podman-debugsourceUpgrade podman-remote-debuginfoUpgrade runc-debuginfoUpgrade cockpit-podmanUpgrade containers-commonUpgrade crun-debuginfoUpgrade go-toolsetUpgrade delveUpgrade conmonUpgrade ignition-grubUpgrade ignition-validateUpgrade libslirp-develUpgrade podman-pluginsUpgrade osbuild-composer-core-debuginfoUpgrade osbuild-composer-debuginfoUpgrade golang-miscUpgrade osbuild-composer-tests-debuginfoUpgrade slirp4netns-debuginfoUpgrade flightctl-agentUpgrade slirp4netnsUpgrade image-builder-debugsourceUpgrade criu-debugsourceUpgrade libslirp-debugsourceUpgrade grafanaUpgrade containernetworking-plugins-debugsourceUpgrade osbuild-composer-coreUpgrade toolbox-debuginfoUpgrade podman-gvproxyUpgrade flightctl-cliUpgrade criu-develUpgrade containernetworking-plugins-debuginfoUpgrade buildah-tests-debuginfoUpgrade flightctl-observabilityUpgrade fuse-overlayfs-debugsourceUpgrade python3-criuUpgrade podman-plugins-debuginfoUpgrade python3-podmanUpgrade golang-srcUpgrade conmon-debuginfoUpgrade criu-libsUpgrade libslirpUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade delve-debuginfoUpgrade osbuild-composer-dnf-jsonUpgrade opentelemetry-collectorUpgrade runc-debugsourceUpgrade grafana-debugsourceUpgrade slirp4netns-debugsourceUpgrade crun-debugsourceUpgrade skopeo-debuginfoUpgrade container-selinuxUpgrade oci-seccomp-bpf-hookUpgrade skopeo-testsUpgrade golang-raceUpgrade flightctl-servicesUpgrade delve-debugsourceUpgrade toolbox-testsUpgrade osbuild-composerUpgrade containernetworking-pluginsUpgrade ignition-validate-debuginfoUpgrade criu-debuginfoNo solution existsUpgrade criu-libs-debuginfoUpgrade udicaUpgrade runcUpgrade libslirp-debuginfoUpgrade image-builder-debuginfoUpgrade crunUpgrade buildah-testsUpgrade osbuild-composer-debugsourceUpgrade ignition-edgeUpgrade fuse-overlayfsUpgrade netavarkUpgrade grafana-selinuxUpgrade grafana-debuginfoUpgrade golang-binUpgrade fuse-overlayfs-debuginfoUpgrade toolboxUpgrade skopeoUpgrade ignition-debuginfoUpgrade podman-debuginfoUpgrade buildahUpgrade toolbox-debugsourceUpgrade podman-tests-debuginfoUpgrade conmon-debugsourceUpgrade aardvark-dnsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade image-builderUpgrade criuUpgrade golang-docsUpgrade ignitionUpgrade podman-remoteUpgrade skopeo-debugsourceUpgrade podman-dockerUpgrade flightctl-selinuxUpgrade ignition-debugsourceUpgrade osbuild-composer-workerUpgrade podman-gvproxy-debuginfoUpgrade critUpgrade golang-testsUpgrade buildah-debugsourceUpgrade golangUpgrade podman-catatonit-debuginfoUpgrade buildah-debuginfoUpgrade podman-catatonitUpgrade osbuild-composer-worker-debuginfoUpgrade podman | Jul 17, 2026 | May 7, 2026 |
| Rocky_linux | — | Upgrade crun-debugsourceUpgrade libslirp-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade grafana-debugsourceUpgrade osbuild-composer-workerUpgrade criu-libsUpgrade osbuild-composer-debuginfoUpgrade libslirp-debugsourceUpgrade criu-libs-debuginfoUpgrade slirp4netns-debugsourceUpgrade critUpgrade podman-gvproxy-debuginfoUpgrade toolbox-debuginfoUpgrade slirp4netns-debuginfoUpgrade podman-remote-debuginfoUpgrade podman-pluginsUpgrade podman-debuginfoUpgrade opentelemetry-collectorUpgrade osbuild-composer-worker-debuginfoUpgrade osbuild-composer-debugsourceUpgrade podman-testsUpgrade go-toolsetUpgrade podman-plugins-debuginfoUpgrade podman-remoteUpgrade libslirp-develUpgrade image-builder-debuginfoUpgrade buildah-debugsourceUpgrade grafanaUpgrade runc-debuginfoUpgrade runcUpgrade image-builderUpgrade delveUpgrade podman-catatonit-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade crunUpgrade criu-develUpgrade containernetworking-plugins-debuginfoUpgrade crun-debuginfoUpgrade containers-commonUpgrade containernetworking-plugins-debugsourceUpgrade skopeo-testsUpgrade osbuild-composerUpgrade podman-debugsourceUpgrade python3-criuUpgrade netavarkUpgrade buildahUpgrade libslirpUpgrade criuUpgrade buildah-debuginfoUpgrade golangUpgrade conmon-debuginfoUpgrade aardvark-dnsUpgrade containernetworking-pluginsUpgrade podmanUpgrade delve-debuginfoUpgrade runc-debugsourceUpgrade skopeo-debugsourceUpgrade criu-debugsourceUpgrade conmon-debugsourceUpgrade image-builder-debugsourceUpgrade toolbox-debugsourceUpgrade grafana-selinuxUpgrade delve-debugsourceUpgrade buildah-testsUpgrade golang-raceUpgrade slirp4netnsUpgrade grafana-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade toolboxUpgrade buildah-tests-debuginfoUpgrade conmonUpgrade toolbox-testsUpgrade osbuild-composer-coreUpgrade golang-binUpgrade fuse-overlayfs-debuginfoUpgrade podman-catatonitUpgrade osbuild-composer-core-debuginfoUpgrade skopeo-debuginfoUpgrade skopeoUpgrade podman-gvproxyUpgrade fuse-overlayfsUpgrade criu-debuginfo | Aug 27, 2026 | Aug 26, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jun 15, 2026 | May 7, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub