{"id":"GO-2025-3988","summary":"Insufficient address encoding when passing mail addresses to the SMTP client in github.com/wneessen/go-mail","details":"Insufficient address encoding when passing mail addresses to the SMTP client in github.com/wneessen/go-mail","aliases":["CVE-2025-59937","GHSA-wpwj-69cm-q9c5"],"modified":"2026-02-04T02:51:59.143444Z","published":"2025-11-05T18:41:07Z","related":["CGA-j39q-mwqm-5mrc"],"database_specific":{"url":"https://pkg.go.dev/vuln/GO-2025-3988","review_status":"REVIEWED"},"references":[{"type":"ADVISORY","url":"https://github.com/wneessen/go-mail/security/advisories/GHSA-wpwj-69cm-q9c5"},{"type":"FIX","url":"https://github.com/wneessen/go-mail/commit/42e92cfe027be04aff72921adb0f72f11d517479"},{"type":"FIX","url":"https://github.com/wneessen/go-mail/pull/496"},{"type":"REPORT","url":"https://github.com/wneessen/go-mail/issues/495"}],"affected":[{"package":{"name":"github.com/wneessen/go-mail","ecosystem":"Go","purl":"pkg:golang/github.com/wneessen/go-mail"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"0.7.1"}]}],"ecosystem_specific":{"imports":[{"path":"github.com/wneessen/go-mail","symbols":["Client.Close","Client.CloseWithSMTPClient","Client.DialAndSend","Client.DialAndSendWithContext","Client.DialToSMTPClientWithContext","Client.DialWithContext","Client.Reset","Client.ResetWithSMTPClient","Client.Send","Client.SendWithSMTPClient","Client.ServerAddr","EMLToMsgFromFile","EMLToMsgFromReader","EMLToMsgFromString","Msg.AddAlternativeHTMLTemplate","Msg.AddAlternativeTextTemplate","Msg.AddBcc","Msg.AddBccFormat","Msg.AddCc","Msg.AddCcFormat","Msg.AddTo","Msg.AddToFormat","Msg.AttachFile","Msg.AttachFromEmbedFS","Msg.AttachFromIOFS","Msg.AttachHTMLTemplate","Msg.AttachReadSeeker","Msg.AttachReader","Msg.AttachTextTemplate","Msg.Bcc","Msg.BccFromString","Msg.BccIgnoreInvalid","Msg.Cc","Msg.CcFromString","Msg.CcIgnoreInvalid","Msg.EmbedFile","Msg.EmbedFromEmbedFS","Msg.EmbedFromIOFS","Msg.EmbedHTMLTemplate","Msg.EmbedReadSeeker","Msg.EmbedReader","Msg.EmbedTextTemplate","Msg.EnvelopeFrom","Msg.EnvelopeFromFormat","Msg.From","Msg.FromFormat","Msg.GetAddrHeaderString","Msg.GetBccString","Msg.GetCcString","Msg.GetFromString","Msg.GetRecipients","Msg.GetSender","Msg.GetToString","Msg.NewReader","Msg.ReplyTo","Msg.ReplyToFormat","Msg.RequestMDNAddTo","Msg.RequestMDNAddToFormat","Msg.RequestMDNTo","Msg.RequestMDNToFormat","Msg.SetAddrHeader","Msg.SetAddrHeaderIgnoreInvalid","Msg.SetBodyHTMLTemplate","Msg.SetBodyTextTemplate","Msg.SetBulk","Msg.SetDate","Msg.SetDateWithValue","Msg.SetGenHeader","Msg.SetHeader","Msg.SetImportance","Msg.SetMessageID","Msg.SetMessageIDWithValue","Msg.SetOrganization","Msg.SetUserAgent","Msg.SignWithTLSCertificate","Msg.Subject","Msg.To","Msg.ToFromString","Msg.ToIgnoreInvalid","Msg.UpdateReader","Msg.Write","Msg.WriteTo","Msg.WriteToFile","Msg.WriteToSendmail","Msg.WriteToSendmailWithCommand","Msg.WriteToSendmailWithContext","Msg.WriteToSkipMiddleware","Msg.WriteToTempFile","NewClient","Part.GetContent","QuickSend","SMTPAuthType.UnmarshalString","SendError.Error","base64LineBreaker.Close","base64LineBreaker.Write","msgWriter.Write","parseMultiPartHeader","parseMultiPartHeader"]},{"path":"github.com/wneessen/go-mail/smtp","symbols":["Client.Mail","Client.Rcpt","Client.TLSConnectionState","DataCloser.Write","SendMail"]}]},"database_specific":{"source":"https://vuln.go.dev/ID/GO-2025-3988.json"}}],"schema_version":"1.7.3"}