Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2025-59937

go-mail is a comprehensive library for sending mails with Go. In versions 0.7.0 and below, due to incorrect handling of the mail.Address values when a sender- or recipient address is passed to the corresponding MAIL FROM or RCPT TO commands of the SMTP client, there is a possibility of wrong address routing or even ESMTP parameter smuggling. For successful exploitation, it is required that the user's code allows for arbitrary mail address input (i. e. through a web form or similar). If only static mail addresses are used (i. e. in a config file) and the mail addresses in use do not consist of quoted local parts, this should not affect users. This issue is fixed in version 0.7.1
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 19.7%
CVSS Severity
CVSS v3 Score 9.1
Products affected by CVE-2025-59937
  • Pebcak » Go-Mail » Version: 0.1.0
    cpe:2.3:a:pebcak:go-mail:0.1.0
  • Pebcak » Go-Mail » Version: 0.1.1
    cpe:2.3:a:pebcak:go-mail:0.1.1
  • Pebcak » Go-Mail » Version: 0.1.2
    cpe:2.3:a:pebcak:go-mail:0.1.2
  • Pebcak » Go-Mail » Version: 0.1.3
    cpe:2.3:a:pebcak:go-mail:0.1.3
  • Pebcak » Go-Mail » Version: 0.1.4
    cpe:2.3:a:pebcak:go-mail:0.1.4
  • Pebcak » Go-Mail » Version: 0.1.5
    cpe:2.3:a:pebcak:go-mail:0.1.5
  • Pebcak » Go-Mail » Version: 0.1.6
    cpe:2.3:a:pebcak:go-mail:0.1.6
  • Pebcak » Go-Mail » Version: 0.1.7
    cpe:2.3:a:pebcak:go-mail:0.1.7
  • Pebcak » Go-Mail » Version: 0.1.8
    cpe:2.3:a:pebcak:go-mail:0.1.8
  • Pebcak » Go-Mail » Version: 0.1.9
    cpe:2.3:a:pebcak:go-mail:0.1.9
  • Pebcak » Go-Mail » Version: 0.2.0
    cpe:2.3:a:pebcak:go-mail:0.2.0
  • Pebcak » Go-Mail » Version: 0.2.1
    cpe:2.3:a:pebcak:go-mail:0.2.1
  • Pebcak » Go-Mail » Version: 0.2.2
    cpe:2.3:a:pebcak:go-mail:0.2.2
  • Pebcak » Go-Mail » Version: 0.2.3
    cpe:2.3:a:pebcak:go-mail:0.2.3
  • Pebcak » Go-Mail » Version: 0.2.4
    cpe:2.3:a:pebcak:go-mail:0.2.4
  • Pebcak » Go-Mail » Version: 0.2.5
    cpe:2.3:a:pebcak:go-mail:0.2.5
  • Pebcak » Go-Mail » Version: 0.2.6
    cpe:2.3:a:pebcak:go-mail:0.2.6
  • Pebcak » Go-Mail » Version: 0.2.7
    cpe:2.3:a:pebcak:go-mail:0.2.7
  • Pebcak » Go-Mail » Version: 0.2.8
    cpe:2.3:a:pebcak:go-mail:0.2.8
  • Pebcak » Go-Mail » Version: 0.2.9
    cpe:2.3:a:pebcak:go-mail:0.2.9
  • Pebcak » Go-Mail » Version: 0.3.0
    cpe:2.3:a:pebcak:go-mail:0.3.0
  • Pebcak » Go-Mail » Version: 0.3.1
    cpe:2.3:a:pebcak:go-mail:0.3.1
  • Pebcak » Go-Mail » Version: 0.3.2
    cpe:2.3:a:pebcak:go-mail:0.3.2
  • Pebcak » Go-Mail » Version: 0.3.3
    cpe:2.3:a:pebcak:go-mail:0.3.3
  • Pebcak » Go-Mail » Version: 0.3.4
    cpe:2.3:a:pebcak:go-mail:0.3.4
  • Pebcak » Go-Mail » Version: 0.3.5
    cpe:2.3:a:pebcak:go-mail:0.3.5
  • Pebcak » Go-Mail » Version: 0.3.6
    cpe:2.3:a:pebcak:go-mail:0.3.6
  • Pebcak » Go-Mail » Version: 0.3.7
    cpe:2.3:a:pebcak:go-mail:0.3.7
  • Pebcak » Go-Mail » Version: 0.3.8
    cpe:2.3:a:pebcak:go-mail:0.3.8
  • Pebcak » Go-Mail » Version: 0.3.9
    cpe:2.3:a:pebcak:go-mail:0.3.9
  • Pebcak » Go-Mail » Version: 0.4.0
    cpe:2.3:a:pebcak:go-mail:0.4.0
  • Pebcak » Go-Mail » Version: 0.4.1
    cpe:2.3:a:pebcak:go-mail:0.4.1
  • Pebcak » Go-Mail » Version: 0.4.2
    cpe:2.3:a:pebcak:go-mail:0.4.2
  • Pebcak » Go-Mail » Version: 0.4.3
    cpe:2.3:a:pebcak:go-mail:0.4.3
  • Pebcak » Go-Mail » Version: 0.4.4
    cpe:2.3:a:pebcak:go-mail:0.4.4
  • Pebcak » Go-Mail » Version: 0.5.0
    cpe:2.3:a:pebcak:go-mail:0.5.0
  • Pebcak » Go-Mail » Version: 0.5.1
    cpe:2.3:a:pebcak:go-mail:0.5.1
  • Pebcak » Go-Mail » Version: 0.5.2
    cpe:2.3:a:pebcak:go-mail:0.5.2
  • Pebcak » Go-Mail » Version: 0.6.0
    cpe:2.3:a:pebcak:go-mail:0.6.0
  • Pebcak » Go-Mail » Version: 0.6.1
    cpe:2.3:a:pebcak:go-mail:0.6.1
  • Pebcak » Go-Mail » Version: 0.6.2
    cpe:2.3:a:pebcak:go-mail:0.6.2
  • Pebcak » Go-Mail » Version: 0.7.0
    cpe:2.3:a:pebcak:go-mail:0.7.0


Contact Us

Shodan ® - All rights reserved