Recursive Descent Parser Vulnerability in eml_parser Module by GOVCERT-LU

CVE-2026-55619

What is CVE-2026-55619?

The eml_parser module, utilized for parsing EML files, contains a vulnerability in its header parsing functionality. An attacker can exploit this flaw by sending deeply nested comments in email headers, leading to a RecursionError. This error is not caught, causing the entire parsing process to abort. As a result, security operations center (SOC) pipelines that handle untrusted EML files may be disrupted. This issue has been remediated in version 3.0.2, which users are encouraged to upgrade to in order to mitigate potential disruptions.

References