PSF-2019-16
Email header injection in Address objects
No score
It is possible to inject email headers using CR or LF character.
The fix disallows CR and LF characters in email.headerregistry.Address
arguments to guard against header injection attacks.
What each source reports
OSV No score
Email header injection in Address objects
It is possible to inject email headers using CR or LF character.
The fix disallows CR and LF characters in email.headerregistry.Address
arguments to guard against header injection attacks.
- Record
PSF-2019-16- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
PSF-2019-16 is a vulnerability with no CVSS score yet, published December 17, 2019. No source lists public exploit code. No source names a fixed version.