CVE-2026-29780Disclosure(govcert.lu / eml_parser)

LOWCVSS 5.5 · MEDIUM

Signal is active with 2 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

eml_parser serves as a python module for parsing eml files and returning various information found in the e-mail as well as computed information. Prior to version 2.0.1, the official example script examples/recursively_extract_attachments.py contains a path traversal vulnerability that allows arbitrary file write outside the intended output directory. Attachment filenames extracted from parsed emails are directly used to construct output file paths without any sanitization, allowing an attacker-controlled filename to escape the target directory. This issue has been patched in version 2.0.1.

govcert.lu CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Patch / fix

https://github.com/GOVCERT-LU/eml_parser/commit/99af03a09a90aaaaadd0ed2ffb5eea46d1ea2cc9

Exploit / PoC references

https://github.com/GOVCERT-LU/eml_parser/security/advisories/GHSA-389r-rccm-h3h5

Other references

https://github.com/GOVCERT-LU/eml_parser/issues/88

Weakness type (CWE)

CWE-22

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

eml_parser

Threat summary

2 mentions across 1 observed day

What's happening

Technical details provided in 1 signal
Disclosure: 1 classified signal
General: 1 classified signal
2 total mentions across 1 day

Affected systems

Vendors

govcert.lu

Products

eml_parser

Deep dive

Activity timeline2 mentions / 1d

Signal classification2 categories

Disclosure

150.0%

General

150.0%

Referenced assets3 URLs

By indicator

Full discourse2 posts

Vulmon Vulnerability Feed@VulmonFeeds217d
Disclosure
CVE-2026-29780 Path Traversal Vulnerability in eml_parser Python Module Before V... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-29780 Vulnerability Alert Subscriptions: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=1
Post summary
The post announces CVE‑2026‑29780, a path‑traversal flaw in the eml_parser Python module, pointing to a VulnerabilityMon page for details, but it provides no evidence of exploitation, patches, or PoC.
0000037
4.0K followersView on X
CVE@CVEnew217d
General
CVE-2026-29780 eml_parser serves as a python module for parsing eml files and returning various information found in the e-mail as well as computed information. Prior to version 2.0… https://www.cve.org/CVERecord?id=CVE-2026-29780
Post summary
The post references CVE-2026-29780 and describes a Python module for parsing .eml files, but provides no exploit details, patch information, or specific vulnerability characteristics.
00000103
56.6K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	govcert.lu	eml_parser	-	python	-

Explore more

Back to dashboard govcert.lu CVEs eml_parser vulnerabilities