CVE-2026-55619

Name of the Vulnerable Software and Affected Versions eml parser versions prior to 3.0.2

Description The header fetch parse() function within the eml parser.parser.HeaderParser module uses email.utils.getaddresses() to parse address-bearing e-mail headers. A deeply nested CFWS (Comments and Folding White Space) comment construct can exhaust the recursive descent parser's call stack in the standard library, triggering a RecursionError. Because this error is not caught, it aborts the parsing of the entire message, allowing an attacker to disrupt SOC (Security Operations Center) pipelines that process untrusted EML files.

Recommendations Update eml parser to version 3.0.2.