URL Validation Flaw in eml_parser Python Module by GOVCERT-LU
CVE-2026-55618
6.5MEDIUM
What is CVE-2026-55618?
The eml_parser Python module has a vulnerability in its URL validation mechanism within the clean_found_uri function. Before version 3.0.2, this function improperly validated potential URL strings, resulting in valid encoded URLs being rejected. Consequently, email security gateways and Security Operations Center (SOC) pipelines that rely on these URLs as indicators of compromise may inadvertently omit hidden malicious links from inspection, exposing organizations to elevated risks. The issue is rectified in version 3.0.2, which ensures that valid URLs and their associated host names are correctly extracted and processed.
Affected Version(s)
eml_parser < 3.0.2