CVE-2026-55619General

LOWCVSS 5.3 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

eml_parser serves as a python module for parsing eml files and returning various information found in the e-mail as well as computed information. Prior to 3.0.2, eml_parser.parser.HeaderParser.header_fetch_parse in eml_parser/parser.py uses email.utils.getaddresses() to parse address-bearing e-mail headers. A deeply nested CFWS comment construct exhausts the standard-library recursive descent parser's call stack and raises RecursionError, which is not caught and therefore aborts parsing of the entire message. An attacker can disrupt SOC pipelines that process untrusted EML files, although callers already need to handle exceptions from malformed or pathological messages. This issue is fixed in version 3.0.2.

0.5/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-770CWE-1124

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Patch or workaround signal is available
  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 1 signal
  • General: 1 classified signal
  • Disclosure: 1 classified signal
  • Peaked 1d ago at 2 mentions (2026-08-25); latest day: 1
  • 3 total mentions across 2 days

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-08-25: 2Mentions · 2026-08-26: 1Patch / Workaround · 2026-08-25: 1Technical Details · 2026-08-26: 108-2508-26
Signal classification3 categories
General
133.3%
Patch
133.3%
Disclosure
133.3%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-08-252
General1Patch1
2026-08-261
Disclosure1
Full discourse3 posts
  • DailyCVE@dailycve
    Disclosure

    🟠 eml_parser, Parser Denial of Service via RecursionError, #CVE-2026-55619 (Medium) -DC-Aug2026-1912 https://dailycve.com/eml_parser-parser-denial-of-service-via-recursionerror-cve-2026-55619-medium-dc-aug2026-1912/

    Post summary

    The post announces CVE-2026-55619, a medium‑severity denial‑of‑service flaw in eml_parser caused by a RecursionError, with no details on PoC, exploitation or patch.

    0001147
    231 followersView on X
  • CVE@CVEnew
    Patch

    CVE-2026-55619 eml_parser serves as a python module for parsing eml files and returning various information found in the e-mail as well as computed information. Prior to 3.0.2, eml_… https://www.cve.org/CVERecord?id=CVE-2026-55619

    Post summary

    The CVE‑2026‑55619 affects the eml_parser Python module in versions prior to 3.0.2; updating to 3.0.2 or later resolves the issue.

    00001899
    58.0K followersView on X
  • Infoflowcloud@infoflowcloud
    General

    🚨*CVE* CVE-2026-55619 eml_parser serves as a python module for parsing eml files and returning various information found in the e-mail as well as computed information. Prior to 3.0.2, eml_… https://www.cve.org/CVERecord?id=CVE-2026-55619 ----- Traducción: CVE-2026-55619 eml… https://infoflow.cloud`

    Post summary

    The post references CVE-2026‑55619 for the eml_parser Python module but offers only a brief description and a link to the CVE record, with no details on exploitation, mitigation, or PoC.

    0000037
    102 followersView on X

Explore more