CVE-2024-24784

Name of the Vulnerable Software and Affected Versions net/mail package in Go (affected versions not specified)

Description The issue is related to the ParseAddressList function, which incorrectly handles comments within display names. This can lead to different trust decisions being made by programs using different parsers, potentially allowing a remote attacker to perform spoofing attacks by providing specially crafted input data.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.