CLEANSTART-2026-PI24714

See a problem?

Import Source

https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-PI24714.json

JSON Data

https://api.osv.dev/v1/vulns/CLEANSTART-2026-PI24714

Upstream

CVE-2026-42499

Published

2026-09-30T20:23:24Z

Modified

2026-10-08T16:47:30Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator

Summary

Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322

Details

Security vulnerability affects the crane package. Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322.

References

Affected packages

CleanStart / crane

Package

Name: crane
Purl: pkg:apk/cleanstart/crane

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

0.21.5-r0

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-PI24714.json"